Re: [ntpwg] Parsing NTP packets regarding MACs and EXTs.

[Danny Mayer <[e-mail]>]

On 6/21/2016 6:58 AM, Salz, Rich wrote:
> 
>> The simple shared key MACs include a 4 byte header.  MD5 mode has a 16
>> byte hash for 20 bytes total.  SHA1 has a 20 byte hash for a 24 byte total.
> 
> And both of those are very very, and fairly, obsolete respectively.
> 
> No new security mechanism, and that's what we're defining here, should use anything less than SHA 256.

Yes. The reference code supports the creation of better hashes than MD5
and SHA-1, since OpenSSL supports it, but the parsing code does not and
that's what needs to get fixed. This is not a NTP WG issue, it's a
problem with the reference implementation that needs to get fixed. I do
note that RFC5905 only references MD5 and that IS a WG problem.

Danny


_______________________________________________
ntpwg mailing list
[e-mail]
http://lists.ntp.org/listinfo/ntpwg