After a year and a half of development, the release of the time synchronization system NTPsec 1.2.2 has been published. It is a fork of the reference implementation of the NTPv4 protocol (NTP Classic 4.3.34), focused on rewriting the codebase to enhance security (cleaning up outdated code, employing attack prevention methods, and securing memory and string operations). The project is led by Eric S. Raymond with contributions from some original NTP Classic developers, engineers from Hewlett Packard and Akamai Technologies, as well as GPSD and RTEMS projects. The source code for NTPsec is distributed under BSD, MIT, and NTP licenses.
Among the changes in the new version:
- Support for the NTPv1 protocol has been restored and its implementation has been cleaned up. The output of the 'ntpq sysstats' command has been enhanced with information about NTPv1 traffic, and counters for NTPv1 have been added to the sysstats log.
- The implementation of the NTS (Network Time Security) protocol has added the ability to use hostname masks, for example, *.example.com. server NTS ensures that cookie keys are stored for 10 days, allowing clients that connect once a day to avoid using NTS-KE (NTS Key Establishment) to keep their cookies up to date.
- Rawstats now include logging of discarded packets.
- Support for Python 2.6 has been restored in the build system.
- Support for OpenSSL 3.0 and LibreSSL has been added.
- For FreeBSD, nanosecond-level accuracy is ensured when retrieving time information.
Source: opennet.ru
