Network Time Protocol Version 4: Autokey Specification
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 58
- Abstract
- This memo describes the Autokey security model for authenticating servers to clients using the Network Time Protocol (NTP) and public key cryptography. Its design is based on the premise that IPsec schemes cannot be adopted intact, since that would preclude stateless servers and severely compromise timekeeping accuracy. In addition, Public Key Infrastructure (PKI) schemes presume authenticated time values are always available to enforce certificate lifetimes; however, cryptographically verified timestamps require interaction between the timekeeping and authentication functions. This memo includes the Autokey requirements analysis, design principles, and protocol specification. A detailed description of the protocol states, events, and transition functions is included. A prototype of the Autokey design based on this memo has been implemented, tested, and documented in the NTP version 4 (NTPv4) software distribution for the Unix, Windows, and Virtual Memory System (VMS) operating systems at http://www.ntp.org. This document is not an Internet Standards Track specification; it is published for informational purposes.
- Publication Date
- 2010-06-01
- Status Note
- Informational
- DOI
10.17487/RFC5906- Link
- https://doi.org/10.17487/RFC5906
- Author(s)
- Brian HabermanProfessor David L. Mills
- Keyword(s)
- NTP, Public Key Cryptography
Latest version of IETF RFC 5906
Document Versions — IETF RFC 5906
-
▶ IETF RFC 5906 (2010-06-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- IETF RFC 5905 [Active*]
Bibliographic Reference(s)
- Schnorr, C., "Efficient signature generation for smart cards", 1991. EXTERNAL
- Guillou, L. and J. Quisquatar, "A "paradoxical" identity- based signature scheme resulting from zero-knowledge", 1990. EXTERNAL
- Mills, D., "Computer Network Time Synchronization - the Network Time Protocol", 2006. EXTERNAL
- Stinson, D., "Cryptography - Theory and Practice", 1995. EXTERNAL
- Mu, Y. and V. Varadharajan, "Robust and secure broadcasting", 2001. EXTERNAL
- IETF RFC 1305 [Superseded*]
- IETF RFC 2412 [Active*]
- IETF RFC 2522 [Active*]
- RFC2875 — RFC2875 EXTERNAL
- IETF RFC 3279 [Active*]
- IETF RFC 4210 [Superseded*]
- IETF RFC 4302 [Active*]
- IETF RFC 4303 [Active*]
- IETF RFC 4306 [Superseded*]
- IETF RFC 5280 [Active, Amended*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC5906.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 5906, Network Time Protocol Version 4: Autokey Specification. Available at https://doi.org/10.17487/RFC5906
Snippet:
IETF RFC 5906, Network Time Protocol Version 4: Autokey Specification. Available at https://doi.org/10.17487/RFC5906
HTML (ISO 690 compliant)
Preview:
IETF RFC 5906, Network Time Protocol Version 4: Autokey Specification. Available at https://doi.org/10.17487/RFC5906
Snippet:
<span class="citation"><cite>IETF RFC 5906</cite>, Network Time Protocol Version 4: Autokey Specification. Available at <a href="https://doi.org/10.17487/RFC5906" target="_blank" rel="noopener">https://doi.org/10.17487/RFC5906</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 5906, Network Time Protocol Version 4: Autokey Specification
doi: 10.17487/RFC5906
url: https://doi.org/10.17487/RFC5906
doi: 10.17487/RFC5906
url: https://doi.org/10.17487/RFC5906
Snippet:
<li> <cite id="bib-rfc5906">IETF RFC 5906</cite>, Network Time Protocol Version 4: Autokey Specification <span class="doi">10.17487/RFC5906</span> </li>
Referenced By
- IETF RFC 5905 [Active*]
- IETF RFC 7384 [Active*]
- IETF RFC 7822 [Active*]
- IETF RFC 9748 [Active*]
- IETF RFC 9769 [Active*]