Re: [ntpwg] I-D Action: draft-ietf-ntp-checksum-trailer-02.txt

Tal Mizrahi <talmi@marvell.com> Sun, 30 August 2015 06:48 UTC

Return-Path: <ntpwg-bounces+ntp-archives-ahfae6za=lists.ietf.org@lists.ntp.org>
X-Original-To: ietfarch-ntp-archives-ahFae6za@ietfa.amsl.com
Delivered-To: ietfarch-ntp-archives-ahFae6za@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4689E1B3E47 for <ietfarch-ntp-archives-ahFae6za@ietfa.amsl.com>; Sat, 29 Aug 2015 23:48:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.31
X-Spam-Level:
X-Spam-Status: No, score=-6.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_62=0.6, RCVD_IN_DNSWL_HI=-5, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T5xH4JqxnVgd for <ietfarch-ntp-archives-ahFae6za@ietfa.amsl.com>; Sat, 29 Aug 2015 23:48:49 -0700 (PDT)
Received: from lists.ntp.org (lists.ntp.org [149.20.68.7]) by ietfa.amsl.com (Postfix) with ESMTP id CFCF81B3B7B for <ntp-archives-ahFae6za@lists.ietf.org>; Sat, 29 Aug 2015 23:48:49 -0700 (PDT)
Received: from lists.ntp.org (lists.ntp.org [149.20.68.7]) by lists.ntp.org (Postfix) with ESMTP id A62DF86DB6D for <ntp-archives-ahFae6za@lists.ietf.org>; Sun, 30 Aug 2015 06:48:49 +0000 (UTC)
X-Original-To: ntpwg@lists.ntp.org
Delivered-To: ntpwg@lists.ntp.org
Received: from mail1.ntp.org (mail1.ntp.org [IPv6:2001:4f8:fff7:1::5]) by lists.ntp.org (Postfix) with ESMTP id 2A16A86D76A for <ntpwg@lists.ntp.org>; Sun, 30 Aug 2015 06:22:02 +0000 (UTC)
Received: from mx0b-0016f401.pphosted.com ([67.231.156.173]) by mail1.ntp.org with esmtps (TLSv1:AES256-SHA:256) (Exim 4.77 (FreeBSD)) (envelope-from <talmi@marvell.com>) id 1ZVw01-000O8Z-7P for ntpwg@lists.ntp.org; Sun, 30 Aug 2015 06:22:02 +0000
Received: from pps.filterd (m0045851.ppops.net [127.0.0.1]) by mx0b-0016f401.pphosted.com (8.15.0.59/8.15.0.59) with SMTP id t7U6LjNq014173; Sat, 29 Aug 2015 23:21:52 -0700
Received: from il-exch02.marvell.com ([199.203.130.102]) by mx0b-0016f401.pphosted.com with ESMTP id 1wkc8d9nhc-1 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-SHA bits=256 verify=NOT); Sat, 29 Aug 2015 23:21:51 -0700
Received: from IL-EXCH02.marvell.com (10.4.102.221) by IL-EXCH02.marvell.com (10.4.102.221) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Sun, 30 Aug 2015 09:21:49 +0300
Received: from IL-EXCH02.marvell.com ([fe80::7dee:c960:1ac6:8c1f]) by IL-EXCH02.marvell.com ([fe80::7dee:c960:1ac6:8c1f%20]) with mapi id 15.00.1044.021; Sun, 30 Aug 2015 09:21:49 +0300
From: Tal Mizrahi <talmi@marvell.com>
To: Miroslav Lichvar <mlichvar@redhat.com>, "ntpwg@lists.ntp.org" <ntpwg@lists.ntp.org>
Thread-Topic: [ntpwg] I-D Action: draft-ietf-ntp-checksum-trailer-02.txt
Thread-Index: AQHQw5mL8yTJ5/i7/Ee6eCiH/HepoZ4f8TyAgARYKTA=
Date: Sun, 30 Aug 2015 06:21:48 +0000
Message-ID: <700776e0c93c416f84a1f763c6644df8@IL-EXCH02.marvell.com>
References: <20150721092341.17016.69271.idtracker@ietfa.amsl.com> <20150827143339.GS24378@localhost>
In-Reply-To: <20150827143339.GS24378@localhost>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [10.4.102.210]
MIME-Version: 1.0
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:, , definitions=2015-08-30_02:, , signatures=0
X-Proofpoint-Spam-Details: rule=inbound_notspam policy=inbound score=0 kscore.is_bulkscore=0 kscore.compositescore=1 compositescore=0.9 suspectscore=0 malwarescore=0 phishscore=0 bulkscore=0 kscore.is_spamscore=0 rbsscore=0.9 spamscore=0 urlsuspectscore=0.9 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1507310000 definitions=main-1508300114
X-SA-Exim-Connect-IP: 67.231.156.173
X-SA-Exim-Rcpt-To: ntpwg@lists.ntp.org
X-SA-Exim-Mail-From: talmi@marvell.com
X-SA-Exim-Version: 4.2
X-SA-Exim-Scanned: Yes (on mail1.ntp.org)
Subject: Re: [ntpwg] I-D Action: draft-ietf-ntp-checksum-trailer-02.txt
X-BeenThere: ntpwg@lists.ntp.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: IETF Working Group for Network Time Protocol <ntpwg.lists.ntp.org>
List-Unsubscribe: <http://lists.ntp.org/options/ntpwg>, <mailto:ntpwg-request@lists.ntp.org?subject=unsubscribe>
List-Archive: <http://lists.ntp.org/pipermail/ntpwg/>
List-Post: <mailto:ntpwg@lists.ntp.org>
List-Help: <mailto:ntpwg-request@lists.ntp.org?subject=help>
List-Subscribe: <http://lists.ntp.org/listinfo/ntpwg>, <mailto:ntpwg-request@lists.ntp.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: ntpwg-bounces+ntp-archives-ahfae6za=lists.ietf.org@lists.ntp.org
Sender: ntpwg <ntpwg-bounces+ntp-archives-ahfae6za=lists.ietf.org@lists.ntp.org>

Hi Miroslav,

Thanks for the comments.
Please see my responses below.

Tal.


>It says the new extension field can be used in packets without MAC and also
>in packets with MAC, even though it says it's not very useful in the later case.
>But it's not clear to me how the checksum complement can be calculated
>when a MAC is present. When the value of the complement is changed to not
>invalidate the UDP checksum (e.g. after updating a timestamp), the MAC
>needs to be updated too as it's calculated from all data including the
>timestamp and the complement.
>But then the UDP checksum won't match, the complement needs to be
>updated again, and we have a cyclic dependency.
>

That is a good point. The checksum complement cannot be updated in the presence of a MAC, and I will update the draft to explain this point.


>As for interoperability with existing implementations, shouldn't be a server
>allowed to use the extension only when the client request had it? There are
>NTP implementations that ignore any replies that are not exactly 48 bytes.

I understand there are implementations that behave this way, but I could not find such a requirement in RFC 5905 - please correct me if I am wrong.
I am not sure we want the *current draft* to be interoperable with unspec'ed behavior. If we believe this is the correct behavior, we should probably start by updating draft-ietf-ntp-extension-field.
I would be interested to hear if other people believe this is the right direction. 

>
>BTW, is anyone working on the "timestamp correction" extension field that is
>mentioned in this draft? I'd be very interested in that.

We (at Marvell) have implemented the hardware aspect of this feature, i.e., timestamping an NTP message + updating its checksum complement. 
 
>
>--
>Miroslav Lichvar
>_______________________________________________
>ntpwg mailing list
>ntpwg@lists.ntp.org
>http://lists.ntp.org/listinfo/ntpwg
_______________________________________________
ntpwg mailing list
ntpwg@lists.ntp.org
http://lists.ntp.org/listinfo/ntpwg