Eric Dumazet e10789acbe inet: switch IP ID generator to siphash
[ Upstream commit df453700e8d81b1bdafdf684365ee2b9431fb702 ]

According to Amit Klein and Benny Pinkas, IP ID generation is too weak
and might be used by attackers.

Even with recent net_hash_mix() fix (netns: provide pure entropy for net_hash_mix())
having 64bit key and Jenkins hash is risky.

It is time to switch to siphash and its 128bit keys.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Reported-by: Amit Klein <aksecurity@gmail.com>
Reported-by: Benny Pinkas <benny@pinkas.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2019-06-09 09:18:10 +02:00
..
2017-07-11 06:08:58 -04:00
2019-05-08 07:20:45 +02:00
2019-03-23 14:35:16 +01:00
2019-02-23 09:06:44 +01:00
2018-10-18 09:16:17 +02:00
2017-08-31 14:42:19 -07:00
2019-03-13 14:03:09 -07:00
2017-06-15 12:12:40 -04:00
2018-05-16 10:10:23 +02:00
2018-02-25 11:07:59 +01:00