blob: 25c2b63988d0882e2aec6b04cf02012d3559897e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
# Roughenough
**Roughenough** is a Rust [Roughtime](https://roughtime.googlesource.com/roughtime) secure time
synchronization server.
It is a **work in progress**. Current status:
* Server is functionally complete: it parses requests and generates valid Roughtime responses.
* Still TODO:
* Run-time configuration (udp port, listening interface, etc)
* Loading the long-term key
* Better operational ergonomics
## About the Roughtime Protocol
[Roughtime](https://roughtime.googlesource.com/roughtime) is a protocol that aims to achieve rough
time synchronisation in a secure way that doesn't depend on any particular time server, and in such
a way that, if a time server does misbehave, clients end up with cryptographic proof of it. It was
created by Adam Langley and Robert Obryk.
## Links
* [Roughenough Github repo](https://github.com/int08h/roughenough)
* [Roughtime project](https://roughtime.googlesource.com/roughtime)
* My blog posts [describing Roughtime features](https://int08h.com/post/to-catch-a-lying-timeserver/) and
exploring the [details of Roughtime messages](https://int08h.com/post/roughtime-message-anatomy/).
## Building
Use `cargo` to compile and run the server binary:
```bash
$ cargo run --bin server
```
## Limitations
Roughenough does not implement the response fault-injection Roughtime ecosystem feature.
On-line delegated key rotation is also not implemented; the server must be restarted to
generate a new delegated key.
## Contributors
* Stuart Stock, original author and current maintainer (stuart {at} int08h.com)
## Copyright and License
Roughenough is copyright (c) 2017 int08h LLC. All rights reserved.
int08h LLC licenses Roughenough (the "Software") to you under the Apache License, version 2.0
(the "License"); you may not use this Software except in compliance with the License. You may obtain
a copy of the License from the [LICENSE](../master/LICENSE) file included with the Software or at:
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software distributed under the License
is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied. See the License for the specific language governing permissions and limitations under
the License.
|
