tree 34931bbae24829b556c27791e0f2d160b66a32ad
parent fa3b0ccccd68b8ce227092cfa69848eecaf97e9c
author Erick Tryzelaar <etryzelaar@google.com> 1555436840 -0700
committer Erick Tryzelaar <etryzelaar@google.com> 1555716711 -0700

Only consider the count of valid keys to verify thresholds

Since keys can now contain multiple key ids, we need to protect
against metadata being signed multiple times with the same key,
only differentiating the signature by the key id. This protects
us from an attacker that steals one key, but go-tuf would count
it N times, where N is the number of key ids.

Change-Id: I8db285a3f8d6610c772cd7120f69fb118513000a