Message Authentication Code for the Network Time Protocol

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 5
Abstract: The Network Time Protocol (NTP), as described in RFC 5905, states that NTP packets should be authenticated by appending NTP data to a 128-bit key and hashing the result with MD5 to obtain a 128-bit tag. This document deprecates MD5-based authentication, which is considered too weak, and recommends the use of AES-CMAC as described in RFC 4493 as a replacement.
Publication Date: 2019-06-01
Status Note: Proposed Standard
DOI: 10.17487/RFC8573
Link: https://doi.org/10.17487/RFC8573
Author(s): Aanchal Malhotra
Sharon Goldberg
Keyword(s): NTP

Latest version of IETF RFC 8573

Document Versions — IETF RFC 8573

▶ IETF RFC 8573 (2019-06-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Amended by:

IETF RFC 9748 [Active*]

Normative Reference(s)

NIST.SP.800-38B — NIST-CMAC EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 4493 [Active*]
IETF RFC 5905 [Active*]
IETF RFC 8174 [Active*]

Bibliographic Reference(s)

Bellare, M., Canetti, R., and H. Krawczyk, "Keying Hash Functions and Message Authentication", Advances in Cryptology - Crypto 96 Proceedings, Lecture Notes in Computer Science, Vol. 1109, N. Koblitz ed, Springer- Verlag, 1996. EXTERNAL
Joux, A., "Authentication Failures in NIST version of GCM", < http://csrc.nist.gov/groups/ST/toolkit/BCM/documents/ comments/800-38_Series-Drafts/GCM/Joux_comments.pdf >. EXTERNAL
Geuron, S., "Intel Advanced Encryption Standard (AES) New Instructions Set", May 2010, < https://www.intel.com/content/dam/doc/white-paper/ advanced-encryption-standard-new-instructions-set- paper.pdf >. EXTERNAL
IETF RFC 1321 [Active*]
IETF RFC 6151 [Active*]
IETF RFC 7696 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC8573.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 8573, Message Authentication Code for the Network Time Protocol. Available at https://doi.org/10.17487/RFC8573

Snippet:

IETF RFC 8573, Message Authentication Code for the Network Time Protocol. Available at https://doi.org/10.17487/RFC8573

HTML (ISO 690 compliant)

Preview:

IETF RFC 8573, Message Authentication Code for the Network Time Protocol. Available at https://doi.org/10.17487/RFC8573

Snippet:

<span class="citation"><cite>IETF RFC 8573</cite>, Message Authentication Code for the Network Time Protocol. Available at <a href="https://doi.org/10.17487/RFC8573" target="_blank" rel="noopener">https://doi.org/10.17487/RFC8573</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 8573, Message Authentication Code for the Network Time Protocol
doi: 10.17487/RFC8573
url: https://doi.org/10.17487/RFC8573

Snippet:

<li>
<cite id="bib-rfc8573">IETF RFC 8573</cite>, Message Authentication Code for the Network Time Protocol
<span class="doi">10.17487/RFC8573</span>
</li>

Referenced By

IETF RFC 8915 [Active*]
IETF RFC 9748 [Active*]