Newsgroups: comp.archives
Path: utzoo!utgpu!news-server.csri.toronto.edu!ox.com!emv
From: bishop@WINDSOR.DARTMOUTH.EDU (Matt Bishop)
Subject: [kerberos] Re: Time synchronization
Message-ID: <1991Feb23.085027.17231@ox.com>
Followup-To: comp.protocols.kerberos
Sender: emv@ox.com (Edward Vielmetti)
Reply-To: Matt Bishop <Matt.Bishop@dartmouth.edu>
Organization: Internet-USENET Gateway at Stanford University
References: <9102221319.AA02247@windsor.dartmouth.edu>
Date: Sat, 23 Feb 1991 08:50:27 GMT
Approved: emv@ox.com (Edward Vielmetti)
X-Original-Newsgroups: comp.protocols.kerberos

Archive-name: internet/ntp/ntp2-security/1991-02-22
Archive: dartvax.dartmouth.edu:/pub/dropoff/ntp2sec.ps [129.170.16.4]
Original-posting-by: bishop@WINDSOR.DARTMOUTH.EDU (Matt Bishop)
Original-subject: Re: Time synchronization
Reposted-by: emv@ox.com (Edward Vielmetti)


Folks,
   If you're interested in the security issues raised by NTP version 2,
I have a technical report that discusses a lot of them, especially the
authentication mechanism and problems.  If you want a copy, you can get
a postscript version by anonymous ftp to dartvax.dartmouth.edu (get
the file pub/dropoff/ntp2sec.ps); if you want a paper copy, send a note
to Deb Minichiello (Debra.Minichiello@dartmouth.edu) asking for TR #154,
"A Security Analysis of Version 2 of the Network Time Protocol NTP."
Be aware that the file on dartvax will go away in a week (on 3/2).
   Enjoy!

Matt Bishop


Brought to you by Super Global Mega Corp .com