From 0925d7a2d383d93d05c7c68ee130c48b20629b23 Mon Sep 17 00:00:00 2001 From: stefan Date: Sun, 22 Feb 2026 15:44:18 +0100 Subject: Typos --- .../100-GnuPG-Keysigning-DFD.png | Bin 57304 -> 57326 bytes .../100-GnuPG-Keysigning-DFD.svg | 2 +- .../100-GnuPG-Keysigning-SEQ-KSP-WoT.png | Bin 121531 -> 121546 bytes .../100-GnuPG-Keysigning-SEQ-KSP-WoT.svg | 2 +- .../300-NetBSD-RelEng-STRIDE.png | Bin 79701 -> 78670 bytes .../300-NetBSD-RelEng-STRIDE.puml | 9 +++------ .../300-NetBSD-RelEng-STRIDE.svg | 2 +- .../GnuPG-WoT-Download/pumlit.sh | 2 +- 8 files changed, 7 insertions(+), 10 deletions(-) diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png index 88aac4b..9bb7b1c 100644 Binary files a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png and b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.png differ diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg index 19381e4..d336bf4 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-DFD.svg @@ -1 +1 @@ -Daten Flow Diagram - GnuPG Keysigning between Alice and BobDFD: Alice and Bob KeysigningCompiled: 2026-02-22 15:37 +0100Daten Flow Diagram - GnuPG Keysigning between Alice and BobAliceBobKeyserverAlice KeyringBob KeyringPubKey AlicePubKey Bobsigned PubKey of Alice -> Bobsigned PubKey of Bob -> Alice1. export own PubKey1. export own PubKey2. mail own PubKey to Bob2. mail own PubKey to Alice3. sign PubKey of Alice3. sign PubKey of Bob4. mail signed PubKey of Alice to the mail address in the key4. mail signed PubKey of Bob to the mail address in the key5. import signed PubKey5. signed PubKey6. send new signature to Keyserver6. send new signature to Keyserver \ No newline at end of file +Daten Flow Diagram - GnuPG Keysigning between Alice and BobDFD: Alice and Bob KeysigningCompiled: 2026-02-22 15:43 +0100Daten Flow Diagram - GnuPG Keysigning between Alice and BobAliceBobKeyserverAlice KeyringBob KeyringPubKey AlicePubKey Bobsigned PubKey of Alice -> Bobsigned PubKey of Bob -> Alice1. export own PubKey1. export own PubKey2. mail own PubKey to Bob2. mail own PubKey to Alice3. sign PubKey of Alice3. sign PubKey of Bob4. mail signed PubKey of Alice to the mail address in the key4. mail signed PubKey of Bob to the mail address in the key5. import signed PubKey5. signed PubKey6. send new signature to Keyserver6. send new signature to Keyserver \ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png index 80b30c8..a0a0b85 100644 Binary files a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png and b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.png differ diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg index 9eb68c5..fbc52b8 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/100-GnuPG-Keysigning-SEQ-KSP-WoT.svg @@ -1 +1 @@ -Sequence Diagram - Mutual Key Signing with Owner Trust (<font:monospace>tsign</font>)Sequence Diagram - Mutual Key Signing with Owner Trust (tsign)AliceBobAlice GnuPGBob GnuPGAlice KeyringBob KeyringAlice Owner TrustBob Owner TrustAlice PassportBob PassportAliceAliceBobBobAlice GnuPGAlice GnuPGBob GnuPGBob GnuPGAlice KeyringAlice KeyringBob KeyringBob KeyringAlice Owner TrustAlice Owner TrustBob Owner TrustBob Owner TrustAlice PassportAlice PassportBob PassportBob PassportKey Signing PartyID Verification via PassportVerify Bobs Passportverify ID and Key-FingerprintVerify Alice Passportverify ID and Key-Fingerprint:wKeyExchangeKey ExchangeExport PubKeyRead PubKeyof AliceSend PubKeyof AliceExport PubKeyRead PubKeyof BobSend PubKeyof BobSigningSign Alice key(identity verified)Store signature on Alice keyMail signed Alice keySign Bob key(identity verified)Store signature on Bob keyMail signed Bob keyImportImport signed Alice keyUpdate keyringImport signed Bob keyUpdate keyringSet Owner TrustSet owner trust for BobStore trust levelSet owner trust for AliceStore trust levelTrust calculation voa Web of TrustWeb of Trust CalculationCheck validity of Bob keyRead signaturesRead owner trust valuesValidity status(unknown/marginal/full)Check validity of Alice keyRead signaturesRead owner trust valuesValidity status(unknown/marginal/full)Sequence of Key Signing with n==2Compiled: 2026-02-22 15:37 +0100Keysigning between Alice and Bob.gpg --recv-keys 0x11F4C41EB3FBAE33.gpg --edit-key 0x11F4C41EB3FBAE33.tsign.gpgarmorexport-options export-minimal --export 0xB3FBAE33 > 0xB3FBAE33.asc \ No newline at end of file +Sequence Diagram - Mutual Key Signing with Owner Trust (<font:monospace>tsign</font>)Sequence Diagram - Mutual Key Signing with Owner Trust (tsign)AliceBobAlice GnuPGBob GnuPGAlice KeyringBob KeyringAlice Owner TrustBob Owner TrustAlice PassportBob PassportAliceAliceBobBobAlice GnuPGAlice GnuPGBob GnuPGBob GnuPGAlice KeyringAlice KeyringBob KeyringBob KeyringAlice Owner TrustAlice Owner TrustBob Owner TrustBob Owner TrustAlice PassportAlice PassportBob PassportBob PassportKey Signing PartyID Verification via PassportVerify Bobs Passportverify ID and Key-FingerprintVerify Alice Passportverify ID and Key-Fingerprint:wKeyExchangeKey ExchangeExport PubKeyRead PubKeyof AliceSend PubKeyof AliceExport PubKeyRead PubKeyof BobSend PubKeyof BobSigningSign Alice key(identity verified)Store signature on Alice keyMail signed Alice keySign Bob key(identity verified)Store signature on Bob keyMail signed Bob keyImportImport signed Alice keyUpdate keyringImport signed Bob keyUpdate keyringSet Owner TrustSet owner trust for BobStore trust levelSet owner trust for AliceStore trust levelTrust calculation voa Web of TrustWeb of Trust CalculationCheck validity of Bob keyRead signaturesRead owner trust valuesValidity status(unknown/marginal/full)Check validity of Alice keyRead signaturesRead owner trust valuesValidity status(unknown/marginal/full)Sequence of Key Signing with n==2Compiled: 2026-02-22 15:43 +0100Keysigning between Alice and Bob.gpg --recv-keys 0x11F4C41EB3FBAE33.gpg --edit-key 0x11F4C41EB3FBAE33.tsign.gpgarmorexport-options export-minimal --export 0xB3FBAE33 > 0xB3FBAE33.asc \ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png index d41c787..b1a0638 100644 Binary files a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png and b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.png differ diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.puml b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.puml index 5de5cbe..c1f4cf6 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.puml +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.puml @@ -3,9 +3,6 @@ ' !theme mimeograph skinparam shadowing false -skinparam rectangle { - BorderThickness 2 -} Title Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1) @@ -15,7 +12,7 @@ Timestamp: %date("yyyy-MM-dd kk:mm Z") endheader legend right -|= STRIDE |= Abbrevation| +|= STRIDE |= Abbreviation| |S| Spoofing | |T| Tampering | |R| Repudiation | @@ -40,7 +37,7 @@ endlegend rectangle "Internet" #line:LightGray { - actor "Black Hat"" as Attacker #FF0000 + actor "Black Hat" as Attacker #FF0000 } rectangle "DMZ" #line:LightGray { @@ -79,7 +76,7 @@ Attacker -[#red,dashed]-> WWW : (AT1) Exploit Webserver Vuln note on link: EoP WWW -[#purple,dashed]-> Repo : (AT2) Pivot to Repo -note on link: EoP [#Orange] +note on link: EoP Repo -[#orange,dashed,thickness=2]-> Repo : (AT3) Replace ISO\n&& Checksum\n&& Signature note on link: Tamper diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg index 257ddfc..29b64de 100644 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/300-NetBSD-RelEng-STRIDE.svg @@ -1 +1 @@ -Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)Attack Flows and Trust BoundariesTimestamp: 2026-02-22 15:37 +0100Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)InternetDMZInternal NetworkBlack Hat"Public Web Server:T, I, DoS, EoPCVS RelEngT, R, EoPRelease RepoHVTS, T, R, I, DoS, EoPSecurity Officer(DF1) Publish ISO + Checksums(DF2) Sign Checksums (GnuPG)(DF3) Deploy Artifacts(AT2) Pivot to RepoEoP [#Orange](DF4) Distribute ISO + Checksums + Signature(AT1) Exploit Webserver VulnEoP(AT3) Replace ISO&& Checksum&& SignatureTamperSTRIDEAbbrevationSSpoofingTTamperingRRepudiationIInformation DisclosureDoSDenial of ServiceEoPElevation of Privilege Relationship ColourColourAttack PhaseRedInitial ExploitDeep PurpleLateral MovementOrangeIntegrity ViolationGreenLegitimate Signing LightGray box: Trust BoundaryNotes on Relation: STRIDE categoryDF: Data FlowAT: Attack Path \ No newline at end of file +Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)Attack Flows and Trust BoundariesTimestamp: 2026-02-22 15:43 +0100Attack Flow and Trust Boundaries: manipulated ISO image AND manipulated checksums/signatures (SLSA1)InternetDMZInternal NetworkBlack HatPublic Web Server:T, I, DoS, EoPCVS RelEngT, R, EoPRelease RepoHVTS, T, R, I, DoS, EoPSecurity Officer(DF1) Publish ISO + Checksums(DF2) Sign Checksums (GnuPG)(DF3) Deploy Artifacts(AT2) Pivot to RepoEoP(DF4) Distribute ISO + Checksums + Signature(AT1) Exploit Webserver VulnEoP(AT3) Replace ISO&& Checksum&& SignatureTamperSTRIDEAbbreviationSSpoofingTTamperingRRepudiationIInformation DisclosureDoSDenial of ServiceEoPElevation of Privilege Relationship ColourColourAttack PhaseRedInitial ExploitDeep PurpleLateral MovementOrangeIntegrity ViolationGreenLegitimate Signing LightGray box: Trust BoundaryNotes on Relation: STRIDE categoryDF: Data FlowAT: Attack Path \ No newline at end of file diff --git a/PlantUML-ModelingTrust/GnuPG-WoT-Download/pumlit.sh b/PlantUML-ModelingTrust/GnuPG-WoT-Download/pumlit.sh index dcb7929..321c374 100755 --- a/PlantUML-ModelingTrust/GnuPG-WoT-Download/pumlit.sh +++ b/PlantUML-ModelingTrust/GnuPG-WoT-Download/pumlit.sh @@ -1,3 +1,3 @@ plantuml -svg *.puml plantuml -png *.puml -asciidoctor index.adoc +#asciidoctor index.adoc -- cgit v1.2.3