The Network Time Protocol is generally used completely unprotected, much like the web was before HTTPS. At @fosdem 2026, Ruben explained how we aim to push adoption of secure time (NTS) using pools of NTS servers.

Video and slides: https://fosdem.org/2026/schedule/event/J8UN83-securing_time_with_nts/

#fosdem2026 #opensource #timesynchronization

David and Ruben went to ISPCS in Tokyo to put Statime (PTP in Rust) to the test at Plugfest, and David gave a talk at the Symposium.

Read Ruben's recap of the IEEE Symposium on Precision Clock Synchronization here: https://tweedegolf.nl/en/blog/143/travelling-to-the-land-of-the-rising-sun-with-statime

Thanks to @nlnet and @sovtechfund for supporting the continued progress on Statime!

#timesynchronization #rust #rustlang

Travelling to the land of the rising sun with Statime - Blog - Tweede golf

At the beginning of October, David and I went to ISPCS in Tokyo. The ISPCS (IEEE Symposium on Precision Clock Synchronization) is all about the PTP protocol and related technologies, and we attend ...

Time synchronization is essential to the security of our devices and our internet, but at the same time, the most commonly used (S)NTP clients are easy to manipulate.

Michiel explains the problems, the consequences, and how secure time can solve them: https://tweedegolf.nl/en/blog/142/manipulating-time-through-sntp

@trifectatech

#timesynchronization #opensource #security

Manipulating time through (S)NTP - Blog - Tweede golf

The NTP protocol is used by many devices to synchronize their system clocks. However, many devices use SNTP clients which are even more vulnerable to interference. As most (S)NTP packets are unaut ...

The Network Time Protocol is the last major security gap in universally used Internet protocols.

Pools of secure time servers (NTS) are the solution; what is an NTS pool and how can we build them?

Ruben explains in this blog: https://tweedegolf.nl/en/blog/139/enabling-pools-in-nts

@sovtechfund
@ProssimoISRG
@trifectatech
@nlnet
@SIDNlabs
@marcodavids
@ekline
@reitinger
@hesselma
@benno

#rust #rustlang #security #infrastructure #timesynchronization

Enabling pools in NTS - Blog - Tweede golf

We previously talked about how secure time is required for a safe internet. We mentioned how we want to increase the adoption of NTS, the secure time synchronization standard built on top of NTP. ...

Ruben and David will be at IETF 121 in Dublin! Chat about NTPv5 (the next version of the Network Time Protocol), or our proof-of-work for mitigating TLS attacks? Reach out to them, or see them in action at the Hackaton!

https://www.ietf.org/meeting/121/

@nlnet @marcodavids
@ietf

#rust #rustlang #timesynchronization

IETF 121 Dublin

The IETF 121 meeting hosted by Cisco starts Saturday 2 November and runs through Friday afternoon, 8 November. The meeting venue is the Convention Centre Dublin.

IETF

David and Ruben are at the Symposium on Precision Clock Synchronization in Tokyo this week! They are currently testing Statime during the Plugfest. Curious to see how our PTP implementation will hold up? So are we!

https://2024.ispcs.org/ieee-1588-plugfest

#rust #rustlang #timesynchronization #IEEE #IMS #ISPCS2024

David wrote a scientific paper explaining how we use the Kalman filter to automatically estimate clock stability and network noise at runtime in Statime, our Rust implementation of the Precision Time Protocol.

Read the paper here: https://tweedegolf.nl/en/blog/138/ispcs-paper-estimating-noise-for-clock-synchronizing-kalman-filters

David and Ruben will be testing and presenting their work on Statime at the Symposium on Precision Clock Synchronization in Tokyo on from 7 to 11 October!

#rust #rustlang #timesynchronization

ISPCS paper: Estimating noise for clock-synchronizing Kalman filters - Blog - Tweede golf

Our Statime project now provides strong synchronization performance and accurate synchronization error estimates without manual tuning for any specific hardware, because it automatically determine ...

For a comprehensive overview of how time synchronization works, the various protocols, how the security measures work, and how our Rust implementations (ntpd-rs and Statime) fit into this picture, watch @tamme's 'introduction to network-based time synchronization' talk from the RIOT Summit:

https://www.youtube.com/watch?v=qeKdt6qtvlI

#timesynchronization #rust #rustlang @sovtechfund @nlnetfdn @sidnfonds

RIOT Summit 2024, "What time is it? An introduction to network based time synchronization."

YouTube

We've measured performance for Statime (our Rust implementation of the Precision Time Protocol) comparable to Linux PTP!

Read David's explanation of the setup and results here: https://tweedegolf.nl/en/blog/129/statime-vs-linux-ptp-comparison-of-precision

#security #timesynchronization #digitalinfrastructure

Statime vs Linux PTP: Comparison of precision - Blog - Tweede golf

As part of the development of our Precision Time Protocol implementation, Statime, we want to know how it performs compared to other implementations of PTP. To figure this out, last April we visi ...

NTS4PTP (a mechanism for distributing the keys for PTP authentication) is currently going through the IETF process. This led David to take a closer look at NTS4PTP and the underlying PTP security mechanism.

Read his blog about the potential security problems he encountered: https://tweedegolf.nl/en/blog/125/authentication-for-ptp

#security #timesynchronization #digitalinfrastructure

Authentication for PTP - Blog - Tweede golf

PTP was originally designed for networks in which all devices were ultimately trusted. In version 1, no security mechanism was present, and version 2 only provided an experimental mechanism. Howev ...