Comment by dfrage

Who just happens to be the tech lead to a partial answer to this problem: http://ntpsec.org/ Which implicitly criticizes the reference implementation.