Elgato_dark/python-tuf
1
0
Fork 0
mirror of https://github.com/theupdateframework/python-tuf synced 2026-05-24 10:08:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
Python reference implementation of The Update Framework (TUF)
42 commits 28 branches 35 tags 23 MiB
Python 100%
Find a file
Kon 4bf56c8fa1 Started TUF system test. Prepared test fixtures.
2013-02-20 11:18:21 -05:00
docs Add .tex files for the TUF spec documents. 2013-02-11 14:20:45 -05:00
evpy Move all files up one directory from 'src/'. 2013-02-10 21:38:06 -05:00
simplejson Move all files up one directory from 'src/'. 2013-02-10 21:38:06 -05:00
tuf Started TUF system test. Prepared test fixtures. 2013-02-20 11:18:21 -05:00
.gitignore Update .gitignore 2013-02-10 20:58:30 -05:00
AUTHORS.txt Move all files up one directory from 'src/'. 2013-02-10 21:38:06 -05:00
basic_client.py Update affected module following review of util.py and test_util.py. 2013-02-13 10:57:01 -05:00
example_client.py Update affected module following review of util.py and test_util.py. 2013-02-13 10:57:01 -05:00
LICENSE.txt Move all files up one directory from 'src/'. 2013-02-10 21:38:06 -05:00
quickstart.py Fixed: quickstart.py left behind a temporary directory. 2013-02-15 09:28:51 -05:00
README.txt Move all files up one directory from 'src/'. 2013-02-10 21:38:06 -05:00
setup.py Move all files up one directory from 'src/'. 2013-02-10 21:38:06 -05:00

README.txt 

A Framework for Securing Software Update Systems
------------------------------------------------

TUF (The Update Framework) helps developers secure their new or existing
software update systems. Software update systems are vulnerable to many known
attacks, including those that can result in clients being compromised or crashed.
TUF helps solve this problem by providing a flexible security framework that can
be added to software updaters.


What Is a Software Update System?
---------------------------------

Generally, a software update system is an application (or part of an application)
running on a client system that obtains and installs software. This can include
updates to software that is already installed or even completely new software.

Three major classes of software update systems are:

Application Updaters - which are used by applications use to update themselves.
For example, Firefox updates itself through its own application updater.

Library Package Managers - such as those offered by many programming languages
for installing additional libraries. These are systems such as Python's
pip/easy_install + PyPI, Perl's CPAN, Ruby's Gems, and PHP's PEAR.

System Package Managers - used by operating systems to update and install all of
the software on a client system. Debian's APT, Red Hat's YUM, and openSUSE's
YaST are examples of these.


Our Approach
------------

There are literally thousands of different software update systems in common use
today. (In fact the average Windows user has about  two dozen different software
updaters on their machine!)

We are building a library that can be universally (and in most cases transparently)
used to secure software update systems.