Subject: [Ntp] [NTS4NTP] info for NTS developers
From: Martin Langer <[email-masked]>
To: [email-masked]
Date: Tue, 15 Jan 2019 11:40:13 +0100
List-Id: <ntp.ietf.org>

hello together,

I'm currently updating my NTS implementation (NTS4NTP-15) and I have 
found a small issue.
*NTS doesn't work with OpenSSL 1.1.1a and TLS1.3*. The NTS-KE fails 
during the TLS key export.
The exporter label "/EXPORTER-network-time-security/1/" is too long and 
the internal key derivation
function fails. A possible workaround is a shorter label like 
"/EXPORTER-nts/1/".

This bug report is already committed and fixed. The next OpenSSL version 
1.1.1b should work correctly.
It's not a problem of the NTS specification.

best regards,
Martin

-- 
Martin Langer, M.Eng.
Ostfalia Hochschule für angewandte Wissenschaften
- Hochschule Braunschweig/Wolfenbüttel
University of Applied Sciences

Labor Datentechnik, Labor Design Digitaler Systeme
Fakultät Elektrotechnik
Salzdahlumer Straße 46/48
38302 Wolfenbüttel
Germany

Tel. : +49 5331 939 43370
Web  : https://www.ostfalia.de/cms/de/pws/bermbach/mitarbeiter/martin-langer