[ntpsec commit] Note non-suppport of Autokey.

Eric S. Raymond esr at ntpsec.org
Tue Oct 6 04:13:12 UTC 2015


Module:    ntpsec
Branch:    master
Commit:    2f3f9de3a15d0395eb0fab23d2621e1700d413ef
Changeset: http://git.ntpsec.org/ntpsec/commit/?id=2f3f9de3a15d0395eb0fab23d2621e1700d413ef

Author:    Eric S. Raymond <esr at thyrsus.com>
Date:      Mon Oct  5 22:36:19 2015 -0400

Note non-suppport of Autokey.

---

 docs/index.txt | 22 ++++++++++++++--------
 1 file changed, 14 insertions(+), 8 deletions(-)

diff --git a/docs/index.txt b/docs/index.txt
index 77bf74e..fecf31b 100644
--- a/docs/index.txt
+++ b/docs/index.txt
@@ -7,7 +7,6 @@ http://www.eecis.udel.edu/%7emills/pictures.html['P.T. Bridgeport Bear'; from 'P
 
 Pleased to meet you.
 
-Last update: 20-Mar-2015 05:30
 |==============================
 
 == Related Links ==
@@ -65,6 +64,13 @@ ship code that is security-hardened, simpler, drastically less bulky
 (the KLOC count of the suite has been cut by a factor of two!), easier
 to understand, and easier to maintain.
 
+We retain, however, almost full compatibility and interoperation with
+NTP Classic.  The qualification "almost" is required because we do not
+support the Autokey public-key encryption scheme. It had
+interoperability and exploitable vulnerability issues too severe to
+be patched. It will need redesign and reimplementation before it
+can be fielded again.
+
 This project began as an effort to address serious security issues
 with NTP Classic, and we intend to keep a particularly strong focus on
 code security and code verifiability.
@@ -81,6 +87,8 @@ few will be user-visible:
 * The deprecated ntpdate program has been replaced with a shell
   wrapper around sntp.
 
+* As noted above, Autokey support has been removed.
+
 [[platforms]]
 == Supported platforms ==
 
@@ -165,13 +173,11 @@ book and numerous background papers and briefing presentations.
 
 Background information on computer network time synchronization is on
 the http://www.eecis.udel.edu/%7emills/exec.html[Executive Summary -
-Computer Network Time Synchronization] page. Discussion on new features
-and interoperability with previous NTP versions is on the
-link:release.html[NTP Version 4 Release Notes] page. Background
-information, bibliography and briefing slides suitable for presentations
-are on the http://www.eecis.udel.edu/%7emills/ntp.html[Network Time
-Synchronization Research Project] page. Additional information is at the
-{project-shortname} web site {project-weblink}.
+Computer Network Time Synchronization] page. Background information,
+bibliography and briefing slides suitable for presentations are on the
+http://www.eecis.udel.edu/%7emills/ntp.html[Network Time
+Synchronization Research Project] page. Additional information is at
+the {project-shortname} web site {project-weblink}.
 
 '''''
 



More information about the vc mailing list