On Thu, Nov 09, 2023 at 09:44:56AM -0500, Clay Kaiser via Linuxptp-devel wrote:
> The following patch introduces initial support for immediate security 
> processing of
> authentication tlv as defined in IEEE1588-2019 section 16.14.
> 
> Integrity Check Values (aka Message Authentication Codes) are calculated with 
> nettle,
> or gnutls when abstracted mac support is not supported by installed (older) 
> nettle.
> Support is included for SHA256-128, SHA258, AES128, AES256.

Cool.

> I have not seen nor heard of any practical use or application for delayed 
> security
> processing so that is not included. If someone can think of a use, they can 
> surely
> add on.

Yeah, delayed processing is crazy stupid.  After all, it is impossible
to "roll back" synchronization.  The example in the standard has the
disclosed key arriving once every 24 hours.  What the heck were those
guys smoking?

Thanks,
Richard


_______________________________________________
Linuxptp-devel mailing list
Linuxptp-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linuxptp-devel

Reply via email to