[Ntp] The trick to timestamp with authentication

Watson Ladd <watsonbladd@gmail.com> Thu, 03 December 2020 05:44 UTC

Return-Path: <watsonbladd@gmail.com>
X-Original-To: ntp@ietfa.amsl.com
Delivered-To: ntp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CDD33A0BEF for <ntp@ietfa.amsl.com>; Wed, 2 Dec 2020 21:44:19 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.099
X-Spam-Level:
X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z6e9mNUdfaBd for <ntp@ietfa.amsl.com>; Wed, 2 Dec 2020 21:44:18 -0800 (PST)
Received: from mail-lf1-x12a.google.com (mail-lf1-x12a.google.com [IPv6:2a00:1450:4864:20::12a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C8FDC3A0BEB for <ntp@ietf.org>; Wed, 2 Dec 2020 21:44:17 -0800 (PST)
Received: by mail-lf1-x12a.google.com with SMTP id q13so954438lfr.10 for <ntp@ietf.org>; Wed, 02 Dec 2020 21:44:17 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=5mWfCm9K82REW6fMOrBaUbbmiKRhGn1tSiKLm78uCVc=; b=PmcbuNO0nKTwJfxjSZT2RNtrdH35sPhrYrivMFqelH2Ly6D/1CKl+s2yh4f6ugItUr tvT83KfIQTFP8+ZLm2qXSfzREj0fnx1mbe8mwf9YXnWmNA+R8PYqCSlPCGgNDPqycSCi sbm5rFAtvB9xwXW9YQkt/IRvESeanZLYYUKBl+B5brZUbxSDTlKRC+JCbfhQw28Ilczk u1mKz3QTrcuc/JQ17YDZPjbGHB8Xh0arDrd56n2wpOKkiz84ClcbMfAAwe/art9e4DCu FPn+RQ23MkKUAK4YZg0ObL5j2WAKbApwLECRXtJ4Y56KaQhCfSVyOYntfOI9Nm/XDBOs /HkQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=5mWfCm9K82REW6fMOrBaUbbmiKRhGn1tSiKLm78uCVc=; b=V0DQpLkRaw9qME0yMdysKLofAmAAiC/05Q/V74yrHhmQ2duaGTbj/W1o4l58Nmmbhs 1nZe3gh8gNBWPYs1ou0oM4ITkAjeHIzyHiZK/P25JPl4rO354zS5eRH/9tVVAKr0Ib0A u52+g2E5l9mjA5WHbt1fq5LTcLexyfMUkFVRdWqt1dkxIaCBLd/rDagkszr+rHxtoe5p tkazG6pQlxnLsS3yBWzeYZHsGN/rDtcgtHmGn0QBILQWBgyyeiPc/KrdeFR9w0cL3oBb 06NG2m1dX4ct3ukIEroqitfoDdG1xQTUhiSTisZM5Qqf1ZM/8taSqEZ6vzT/4QLgE1FQ 1Jug==
X-Gm-Message-State: AOAM532gUDH3XPqrD11Pfbc1gZzLH64QlNweAeobfQ2y/2Qt7w21wLKX 4BizgUvdNQN0dXRA0fwNXhu/PjhRVS4/T0IFPtEM2aevsE0=
X-Google-Smtp-Source: ABdhPJy4ygMJWtW6Q+ET4g/0QP/Ko5PNkThmlIF1hUGtBmjErV2TRilwCo+pZQc0+/+QKyew4w01lsrjB+vZoTLtBQ8=
X-Received: by 2002:a19:cccb:: with SMTP id c194mr666974lfg.175.1606974255535; Wed, 02 Dec 2020 21:44:15 -0800 (PST)
MIME-Version: 1.0
From: Watson Ladd <watsonbladd@gmail.com>
Date: Wed, 02 Dec 2020 21:44:04 -0800
Message-ID: <CACsn0c=K=T4_ZTGyfGcmNR_e9+7DYOaNBipKjxiNYJYcdYma2g@mail.gmail.com>
To: NTP WG <ntp@ietf.org>
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/ntp/TzGA8SMpERhrhQDnMhz0Iv_Pp-w>
Subject: [Ntp] The trick to timestamp with authentication
X-BeenThere: ntp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: <ntp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ntp>, <mailto:ntp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ntp/>
List-Post: <mailto:ntp@ietf.org>
List-Help: <mailto:ntp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ntp>, <mailto:ntp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 03 Dec 2020 05:44:19 -0000

Dear NTP WG,

AES-GCM and Poly1305 are linear. In order to adjust the timestamp in
one step, it suffices to line everything up so that the hardware can
compute the correction in the same cycle as the stamp by isolating the
stamp in one block of the CWC hash.

This won't work with HMAC.

Sincerely,
Watson Ladd

-- 
Astra mortemque praestare gradatim