3 ms·
The average longevity of a Kerberos ticket makes it the perfect example for this attack vector, actually. Are you familiar with something other than NTP as a t
by dvanduzer 12y ago
The average longevity of a Kerberos ticket makes it the perfect example for this attack vector, actually.
Are you familiar with something other than NTP as a time source for devices without CMOS? I have a project that desperately needs crypto without a clock.
- cbsmith 12y agoIf you are really worried, use layer 3 or layer 2 security (say with IPSec) to secure NTP communications. Yes, there is a bit of a bootstrapping problem, but you can address that with a bootstrapped handshake that sets a clock baseline. Alternatively, you could just hardwire a radio receiver (like say... a GPS receiver).