CalculateChainNonce fills the `nonce` buffer with the nonce used in the next request in a chain given a reply and a blinding factor.

CreateReplies signs, using privateKey, a batch of nonces along with the given time and radius.

CreateRequest creates a Roughtime request given an entropy source and the contents of a previous reply for chaining.

Decode parses the output of encode back into a map of tags to bytestrings.

Encode converts a map of tags to bytestrings into an encoded message.

NewCertificate returns a signed certificate, using rootPrivateKey, delegating authority for the given timestamp to onlinePrivateKey.

ParseRequest resolves the supported versions indicated by the client and parses the values required to produce a response.

ResponseVersionFromSupported selects a version to use from the list of versions supported by the clients.

Select a certificate suitable for responding to the request.

VerifyReply parses the Roughtime reply in replyBytes, authenticates it using publicKey and verifies that nonce is included in it.

MinRequestSize is the minimum number of bytes in a request.

VersionDraft08 is draft-ietf-ntp-roughtime-08.

VersionDraft11 is draft-ietf-ntp-roughtime-11.

VersionGoogle is Google-Roughtime as described here: https://roughtime.googlesource.com/roughtime/+/HEAD/PROTOCOL.md.

Error represents a protocol error.

Request is a request sent by a client.

ErrorType is an error type.

Version indicates the version of the Roughtime protocol in use.