bishop@WINDSOR.DARTMOUTH.EDU (Matt Bishop) (02/23/91)
Archive-name: internet/ntp/ntp2-security/1991-02-22 Archive: dartvax.dartmouth.edu:/pub/dropoff/ntp2sec.ps [129.170.16.4] Original-posting-by: bishop@WINDSOR.DARTMOUTH.EDU (Matt Bishop) Original-subject: Re: Time synchronization Reposted-by: emv@ox.com (Edward Vielmetti) Folks, If you're interested in the security issues raised by NTP version 2, I have a technical report that discusses a lot of them, especially the authentication mechanism and problems. If you want a copy, you can get a postscript version by anonymous ftp to dartvax.dartmouth.edu (get the file pub/dropoff/ntp2sec.ps); if you want a paper copy, send a note to Deb Minichiello (Debra.Minichiello@dartmouth.edu) asking for TR #154, "A Security Analysis of Version 2 of the Network Time Protocol NTP." Be aware that the file on dartvax will go away in a week (on 3/2). Enjoy! Matt Bishop