chrony-4.6.1 released

--T1Yvffj7Pkxj+HaN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

chrony-4.6.1 is now available. This release is addressing an issue
that was added in chrony-4.4 with support for AES-128-GCM-SIV keys
in NTS. It causes chrony to not interoperate with implementations
correctly following the RFC 8915. There are no other known NTS
implementations with AES-128-GCM-SIV support yet. A new NTS-KE record
is used to negotiate the use of RFC-8915-compliant keys to avoid
breaking compatibility with older chrony servers and clients.

The source code is available here:
https://chrony-project.org/releases/chrony-4.6.1.tar.gz

SHA256 sum:
571ff73fbf0ae3097f0604eca2e00b1d8bb2e91affe1a3494785ff21d6199c5c

Notable changes since 4.6:

Enhancements
------------
* Add ntsaeads directive to enable only selected AEAD algorithms for NTS

Workarounds
-----------
* Negotiate use of compliant NTS keys with AES-128-GCM-SIV AEAD algorithm [=
1]
  (by default the keys are generated differently than in RFC 8915 for
  compatibility with chrony server and client versions 4.4, 4.5, and 4.6)
* Switch to compliant NTS keys if first response from server is NTS NAK

[1] https://chrony-project.org/doc/spec/nts-compliant-128gcm.html

--=20
Miroslav Lichvar

--T1Yvffj7Pkxj+HaN
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=8TfZ
-----END PGP SIGNATURE-----

--T1Yvffj7Pkxj+HaN--


-- 
To unsubscribe email chrony-announce-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org with "unsubscribe" in the subject.
For help email chrony-announce-request-kWFZVVI9zxvPqho9SqqRMmD2FQJk+8+b@public.gmane.org with "help" in the subject.
Trouble?  Email [email protected]