Make the NTS-KE retry interval exponentially increasing, using a factor provided by the NKE session. Use shorter intervals when the server is refusing TCP connections or the connection is closed or timing out before the TLS handshake.
Add a client and server implementing the Network Time Security (NTS) Key Establishment. Use the GnuTLS library for TLS.