Module byztimed::ntske[][src]

Network Time Security Key Establishment (NTS-KE)

See https://datatracker.ietf.org/doc/draft-ietf-ntp-using-nts-for-ntp/. Byztime key exchange works exactly like NTP key exchange, aside from using a different next-protocol codepoint and a different record type for sending cookies.

Structs

AeadAlgorithm

An RFC 5116 AEAD algorithm number

NtsNextProtocol

An NTS Next Protocol number

NtskeError

An NTS-KE Error number

NtskeOutput

The relevant output of a successful NTS-KE run.

NtskeRecordNumber

An NTS-KE Record Type number

NtskeWarning

An NTS-KE Warning number

Enums

NtskeProblem

An enumeration of everything that can be wrong about an NTS-KE response.

NtskeRecord

Representation of an NTS-KE record

Constants

AEAD_ALGORITHM_AES_128_GCM_SIV
AEAD_ALGORITHM_AES_256_GCM_SIV
AEAD_ALGORITHM_AES_SIV_CMAC_256
AEAD_ALGORITHM_AES_SIV_CMAC_384
AEAD_ALGORITHM_AES_SIV_CMAC_512
ERROR_BAD_REQUEST
ERROR_UNRECOGNIZED_CRITICAL_RECORD
NTSKE_ALPN

ALPN protocol ID for NTS-KE

NTS_NEXT_PROTOCOL_BYZTIME

Taken from private & experimental use range. Lower 15 bits are ASCII “BZ”.

RECORD_NUMBER_AEAD_ALGORITHM_NEGOTIATION
RECORD_NUMBER_END_OF_MESSAGE
RECORD_NUMBER_ERROR
RECORD_NUMBER_NEW_COOKIE_FOR_BYZTIME

Taken from private & experimental use range. ASCII “BZ”.

RECORD_NUMBER_NEXT_PROTOCOL_NEGOTIATION
RECORD_NUMBER_WARNING

Functions

request_ntske

Run the NTS-KE protocol as a client

serve_ntske

Run the NTS-KE protocol as a server