python-tuf

Most of what you describe is external to TUF (authenticating, logging, the specifics of the data you're protecting and how you transfer it once it's validated). A couple things you pointed out are definitely hard with TUF right now: > For instance, administrator approving registration is not a single person, but group of administrators, each with different permissions on streams TUF is being actively developed and this type of approval pattern is planned: https://github.com/theupdateframework/tuf/issues/346 > Client cannot download stream of some other client, and cannot get any information on overlays used by other clients, etc. This is currently a limitation of TUF, but it is known and there are some tentative plans to address it. If you have specific use cases you'd like to contribute to the discussion, there are GitHub issues and the

Responding to your edit: Notary, the underlying project that implements Docker's Content Trust feature, is an implementation of The Update Framework (TUF). Generally, you want a software update system to deal with a whole host of issues. Just solving "is this content signed" actually achieves very little. Survivable key compromise, freshness guarantees, resilience against mix-and-match attacks are all critical to building a system that actually meets real-world use cases and attacks. Threshold signing and signing delegation are additional features that you get when using TUF, which help with splitting the ability to sign across multiple individuals or systems. You seem to be interested in this topic. I recommend you read a couple of papers to get some more background on why TUF exists and what problems it solves. A key point would be to u

Right, the ability for an attacker to change an XML file like this could be considered two separate issues. Things like this is why The Update Framework (TUF) Specification was created: https://theupdateframework.github.io/ The specification covers exactly this kind of attack and has signing of all of the data about an update: https://github.com/theupdateframework/tuf/blob/develop/docs/... But, as far as I know, there isn't an implementation of TUF that works with ObjectiveC and all the other parts of Sparkle, to actually update an OSX application.