in-toto

What is in-toto?

in-toto is designed to ensure the integrity of a software product from initiation to end-user installation. It does so by making it transparent to the user what steps were performed, by whom and in what order. As a result, with some guidance from the group creating the software, in-toto allows the user to verify if a step in the supply chain was intended to be performed, and if the step was performed by the right actor.

 

The entire lifecycle of in-toto

The following figure shows you the visualised product life cycle of in-toto. You can see all releases with the latest patch version, the long-term support characteristics (orange flag in the green circle, the periods for version provision, maintenance and support.

Figure: Release, patch and end-of-life cycle of product in-toto (in-toto)

 

Facts and figures about in-toto

 

 

Keywords

in-toto

 

in-toto

 

Application

 

Release

 

Version

 

Major

 

Minor

 

Patch

 

End-of-life

 

EOL

 

Support

 

End-of-support

 

EOS

 

Maintenance

 

End-of-maintenance

 

EOM

 

Security

 

Long-term support

 

LTS

 

Vulnerabilities

 

Common vulnerabilities & exposures

 

CVE

 

Security