NTPsec 1.2.5 released

Hal Murray halmurray at sonic.net
Fri Jul 31 07:07:24 UTC 2026


Thanks.  Congrats.

> Note: Python 2 and OpenSSL 1.1.0 support will be removed in the next release.

I was expecting we would get rid of 1.1.1 too.  Was that a typo and/or 
what is your plan?

------

NIST's NTP Shared Key Authentication now supports SHA256 and HMAC-SHA256
 https://www.nist.gov/pml/time-and-frequency-division/time-services/nist-authenticated-ntp-service

SHA256 is a simple digest like MD5 and SHA1.  It already works with our existing code.

I was working on adding HMAC support.  That will be significantly simpler if I don't have to support versions before 3.x.x.

I think it would be reasonably easy to add a compile time switch to drop support for shared authentication, like we have for --disable-nts.  That would let ntpd keep working on really old gear as long as you didn't need NTS or shared keys. to work.


-- 
These are my opinions.  I hate spam.





More information about the devel mailing list