mirror of
https://gitlab.com/chrony/chrony.git
synced 2025-12-04 03:15:07 -05:00
In order to allow deterministic parsing of NTPv4 extension fields, the MAC must not be longer than 192 bits (RFC 7822). One way to get around this limitation when using symmetric keys which produce longer MACs is to truncate them to 192 bits (32-bit key ID and 160-bit hash). Modify the code to accept NTPv4 packets with MACs truncated to 192 bits, but still allow long MACs in NTPv4 packets to not break compatibility with older chrony clients.
3.4 KiB
3.4 KiB