Proposal to include additional cryptographic algorithms in the NTPSec implementation

[Sarath _Msft_]

Hello,
      I am a software engineer with Microsoft Corporation. I am reaching out with the proposal to extend the list of supported cryptographic algorithms in NTPSec's NTS-NTP implementation.
As I understand it, the current NTPSec implementation supports only the AEAD_AES_SIV_CMAC algorithms of various cipher lengths. I propose including support for AEAD_AES_128_GCM, AEAD_AES_256_GCM, AEAD_AES_128_CCM and AEAD_AES_256_CCM algorithms in this implementation. These algorithms are already part of OpenSSL library and should not require linking additional libraries to the project.
These specific algorithms are implemented in both OpenSSL library and Microsoft's SymCrypt Library (https://github.com/microsoft/SymCrypt) , whereas the AEAD_AES_SIV_CMAC algorithms are not. Having common crypto support across libraries and implementations will help expand the availability of NTS protocol and further the adoption of this critical technology everywhere.

Please share any feedback or specific process/instructions for this proposal. Thank you in advance for your time!
-Sarath

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ntpsec.org/pipermail/devel/attachments/20250125/ef08b718/attachment.htm>