Solved NTS (Network Time Security) support

[DJones]

Any change we will see support for NTS in ntpMerlin?

https://blog.cloudflare.com/secure-time/

Network Time Security for the Network Time Protocol

This memo specifies Network Time Security (NTS), a mechanism for using Transport Layer Security (TLS) and Authenticated Encryption with Associated Data (AEAD) to provide cryptographic security for the client-server mode of the Network Time Protocol (NTP). NTS is structured as a suite of two...

datatracker.ietf.org

Starting work on Network Time Security

Network Time Securityhas been on NTPsec roadmap since the start.

blog.ntpsec.org

RFC 8915: Network Time Security for the Network Time Protocol

This memo specifies Network Time Security (NTS), a mechanism for using Transport Layer Security (TLS) and Authenticated Encryption with Associated Data (AEAD) to provide cryptographic security for the client-server mode of the Network Time Protocol (NTP). NTS is structured as a suite of two...

datatracker.ietf.org

 

[chongnt]

Jack added NTS support for some time already.

ntpMerlin - ntpMerlin v3.x

No... I did not recognize we had to run that... (because of the “Jack be like”) Sorry for the distraction :p Don't forget to restart chronyd after every change you make to chronyd.conf FWIW, my list is growing by the minute, but for some separate certificates need to be imported, and I need...

www.snbforums.com

 

[DJones]

Oh! I missed that. Alright then awesome, glad it’s a feature.

Thanks.

 

[DJones]

Jack added NTS support for some time already.

ntpMerlin - ntpMerlin v3.x

No... I did not recognize we had to run that... (because of the “Jack be like”) Sorry for the distraction :p Don't forget to restart chronyd after every change you make to chronyd.conf FWIW, my list is growing by the minute, but for some separate certificates need to be imported, and I need...

www.snbforums.com

Do I add :1234? Cloudflares website says to add the port

pool time.cloudflare.com iburst nts
pool time.cloudflare.com:1234 iburst nts

 

[chongnt]

Do I add :1234? Cloudflares website says to add the port

pool time.cloudflare.com iburst nts
pool time.cloudflare.com:1234 iburst nts

No need to add port 1234.

# chronyc -N authdata
Name/IP address             Mode KeyID Type KLen Last Atmp  NAK Cook CLen
=========================================================================
time.cloudflare.com          NTS     1   15  256  136    0    0    8  100
time.cloudflare.com          NTS     1   15  256  137    0    0    8  100

 

[iJorgen]

Any plans @RMerlin on adding NTS native in ASUS Merlin firmware? Don't wanna use USB, swap, install Entware and ntpMerlin add-on just for this.
Feels like an important core feature to sync time in a secure way for a router/network and most other network-protocols have switched to secure ones.

 

[EmeraldDeer]

Any plans @RMerlin on adding NTS native in ASUS Merlin firmware? Don't wanna use USB, swap, install Entware and ntpMerlin add-on just for this.
Feels like an important core feature to sync time in a secure way for a router/network and most other network-protocols have switched to secure ones.

I don't know but suspect this is unlikely to happen. The NTP daemon is compiled into the BusyBox binary. BusyBox aggregates stripped down versions of core Linux software into one binary for the purpose of running on low powered hardware like consumer routers.