Crypto, passwords

[Kurt Roeckx]

On Fri, Jan 05, 2018 at 02:41:39PM -0800, Hal Murray wrote:
> 
> > I have no idea how it's used in NTP. But I understand it's some kind of
> > shared password? You should clearly look in how it's being used and if that
> > actually makes sense. Maybe it needs more than just replacing the hash
> > algorithm.
> 
> It appends a digest to the packet.  This digest covers the shared password, 
> the body of the packet, and a 4 byte keyid.

I'm not an expert in this sort of things, but I would suggest you
at least change that to an HMAC.


Kurt