Re: [Ntp] NTS Pools

[Miroslav Lichvar <[e-mail]>]

On Wed, Feb 28, 2024 at 02:40:03PM +0100, David Venhoek wrote:
> Dear Miroslav,
> 
> I have added the row with computational cost, and for reference also
> included a few other interesting computational cost parameters. As to

Great. Thanks.

> regard to your new proposal, I was wondering how that would work with
> the key derivation? I don't see a way to get the key derivation on the
> TLS session with the backend to result in exactly the same key as that
> coming from the session with the client (in fact, if it could I'm
> wondering whether that would be a security issue for TLS). It is
> exactly this trouble that leads to the server changes in the NTS-KE
> load balancer case.

You are right. I didn't think this through. It seems it would need to
be able to clone the TLS session to get the same master secret and
client/server random values from which are derived the keys. I suspect
the server's certificate is included in that somewhere and that has to
be different (otherwise it would be sufficient to redirect the TCP
connection).

-- 
Miroslav Lichvar