Willy Tarreau b2d057560b secure_seq: use the 64 bits of the siphash for port offset calculation ... SipHash replaced MD5 in secure_ipv{4,6}_port_ephemeral() via commit 7cd23e5300 ("secure_seq: use SipHash in place of MD5"), but the output remained truncated to 32-bit only. In order to exploit more bits from the hash, let's make the functions return the full 64-bit of siphash_3u32(). We also make sure the port offset calculation in __inet_hash_connect() remains done on 32-bit to avoid the need for div_u64_rem() and an extra cost on 32-bit systems. Cc: Jason A. Donenfeld <Jason@zx2c4.com> Cc: Moshe Kol <moshe.kol@mail.huji.ac.il> Cc: Yossi Gilad <yossi.gilad@mail.huji.ac.il> Cc: Amit Klein <aksecurity@gmail.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Willy Tarreau <w@1wt.eu> Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2022-05-04 19:22:20 -07:00
..
ila	net: ipv6: check return value of rhashtable_init	2021-09-28 12:59:24 +01:00
netfilter	netfilter: nft_fib: add reduce support	2022-03-20 00:29:47 +01:00
Kconfig	ipv6: ioam: Add support for the ip6ip6 encapsulation	2021-10-04 12:53:35 +01:00
Makefile	net: ipv6: use ipv6-y directly instead of ipv6-objs	2021-09-28 13:13:40 +01:00
addrconf.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-03-03 11:55:12 -08:00
addrconf_core.c	ipv6: add net device refcount tracker to struct inet6_dev	2021-12-06 16:05:11 -08:00
addrlabel.c	ipv6: addrlabel: fix possible memory leak in ip6addrlbl_net_init	2020-11-25 11:20:16 -08:00
af_inet6.c	ipv6: annotate some data-races around sk->sk_prot	2022-02-18 11:53:28 +00:00
ah6.c	ipv6: ah6: use swap() to make code cleaner	2021-11-18 12:00:15 +00:00
anycast.c	ipv6: fix memory leaks on IPV6_ADDRFORM path	2020-07-30 16:30:55 -07:00
calipso.c	cipso,calipso: resolve a number of problems with the DOI refcounts	2021-03-04 15:26:57 -08:00
datagram.c	lsm,selinux: pass flowi_common instead of flowi to the LSM hooks	2020-11-23 18:36:21 -05:00
esp6.c	esp: limit skb_page_frag_refill use to a single page	2022-04-13 10:16:11 +02:00
esp6_offload.c	net: Fix esp GSO on inter address family tunnels.	2022-03-07 13:14:04 +01:00
exthdrs.c	ipv6: partially inline ipv6_fixup_options	2022-01-27 19:46:11 -08:00
exthdrs_core.c	ipv6: remove printk	2019-07-27 14:23:48 -07:00
exthdrs_offload.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
fib6_notifier.c	net: fib_notifier: propagate extack down to the notifier block callback	2019-10-04 11:10:56 -07:00
fib6_rules.c	ipv6: change fib6_rules_net_exit() to batch mode	2022-02-08 20:41:34 -08:00
fou6.c	net: Add MODULE_DESCRIPTION entries to network modules	2020-06-20 21:33:57 -07:00
icmp.c	ipv6: do not use per netns icmp sockets	2022-01-25 11:25:21 +00:00
inet6_connection_sock.c	lsm,selinux: pass flowi_common instead of flowi to the LSM hooks	2020-11-23 18:36:21 -05:00
inet6_hashtables.c	secure_seq: use the 64 bits of the siphash for port offset calculation	2022-05-04 19:22:20 -07:00
ioam6.c	net: ipv6: Get rcv timestamp if needed when handling hop-by-hop IOAM option	2022-03-03 14:38:48 +00:00
ioam6_iptunnel.c	ipv6: ioam: Insertion frequency in lwtunnel output	2022-02-04 20:24:45 -08:00
ip6_checksum.c	…
ip6_fib.c	ipv6: annotate accesses to fn->fn_sernum	2022-01-20 20:18:37 -08:00
ip6_flowlabel.c	ipv6: per-netns exclusive flowlabel checks	2022-02-16 20:37:47 -08:00
ip6_gre.c	ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode	2022-04-25 11:40:45 +01:00
ip6_icmp.c	net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending	2021-02-23 11:29:52 -08:00
ip6_input.c	net: Postpone skb_clear_delivery_time() until knowing the skb is delivered locally	2022-03-03 14:38:48 +00:00
ip6_offload.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-02-24 17:54:25 -08:00
ip6_offload.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
ip6_output.c	ipv6: fix panic when forwarding a pkt with no in6 dev	2022-04-11 12:28:43 +01:00
ip6_tunnel.c	ip6_tunnel: fix possible NULL deref in ip6_tnl_xmit	2022-02-09 11:56:19 +00:00
ip6_udp_tunnel.c	net: Make locking in sock_bindtoindex optional	2020-06-01 14:57:14 -07:00
ip6_vti.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-12-30 12:12:12 -08:00
ip6mr.c	net: ipv6mr: fix unused variable warning with CONFIG_IPV6_PIMSM_V2=n	2022-04-06 15:14:30 +01:00
ipcomp6.c	xfrm: remove hdr_offset indirection	2021-06-11 14:48:50 +02:00
ipv6_sockglue.c	ipv6: annotate some data-races around sk->sk_prot	2022-02-18 11:53:28 +00:00
mcast.c	mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter()	2022-04-30 15:19:08 +01:00
mcast_snoop.c	net: bridge: mcast: fix broken length + header check for MRDv6 Adv.	2021-04-27 14:02:06 -07:00
mip6.c	xfrm: ipv6: move mip6_rthdr_offset into xfrm core	2021-06-11 14:48:50 +02:00
ndisc.c	ipv6: separate ndisc_ns_create() from ndisc_send_ns()	2022-02-21 12:13:45 +00:00
netfilter.c	netfilter: Update ip6_route_me_harder to consider L3 domain	2022-04-25 11:09:20 +02:00
output_core.c	ipv6: use prandom_u32() for ID generation	2021-05-31 22:12:08 -07:00
ping.c	net: ping6: support setting basic SOL_IPV6 options via cmsg	2022-02-17 14:22:09 +00:00
proc.c	net: udp: introduce UDP_MIB_MEMERRORS for udp_mem	2020-11-09 15:34:44 -08:00
protocol.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
raw.c	ipv6: raw: check passed optlen before reading	2021-12-29 12:32:56 -08:00
reassembly.c	net: ipv6: Handle delivery_time in ipv6 defrag	2022-03-03 14:38:48 +00:00
route.c	ipv6: make ip6_rt_gc_expire an atomic_t	2022-04-15 14:28:50 -07:00
rpl.c	net: ipv6: rpl*: Fix strange kerneldoc warnings due to bad header	2020-10-30 12:12:52 -07:00
rpl_iptunnel.c	net: ipv6: rpl_iptunnel: simplify the return expression of rpl_do_srh()	2020-12-08 16:22:54 -08:00
seg6.c	icmp: ICMPV6: Examine invoking packet for Segment Route Headers.	2022-01-04 12:17:35 +00:00
seg6_hmac.c	net: ipv6: check return value of rhashtable_init	2021-09-28 12:59:24 +01:00
seg6_iptunnel.c	seg6: fix the iif in the IPv6 socket control block	2021-12-09 07:55:42 -08:00
seg6_local.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-01-05 14:36:10 -08:00
sit.c	sit: allow encapsulated IPv6 traffic to be delivered locally	2022-01-12 13:56:07 -08:00
syncookies.c	tcp: make sure treq->af_specific is initialized	2022-04-25 12:10:11 +01:00
sysctl_net_ipv6.c	ipv6: ioam: Data plane support for Pre-allocated Trace	2021-07-21 08:14:33 -07:00
tcp_ipv6.c	skb: make drop reason booleanable	2022-03-09 11:22:58 +00:00
tcpv6_offload.c	net: move gro definitions to include/net/gro.h	2021-11-16 13:16:54 +00:00
tunnel6.c	tunnel6: add tunnel6_input_afinfo for ipip and ipv6 tunnels	2020-07-09 12:52:37 +02:00
udp.c	ipv6: Add reasons for skb drops to __udp6_lib_rcv	2022-02-14 11:24:39 +00:00
udp_impl.h	net: pass a sockptr_t into ->setsockopt	2020-07-24 15:41:54 -07:00
udp_offload.c	gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers	2021-11-24 17:21:42 -08:00
udplite.c	net/ipv6: remove compat_ipv6_{get,set}sockopt	2020-07-19 18:16:41 -07:00
xfrm6_input.c	xfrm: state: remove extract_input indirection from xfrm_state_afinfo	2020-05-06 09:40:08 +02:00
xfrm6_output.c	xfrm: fix tunnel model fragmentation behavior	2022-03-01 12:08:40 +01:00
xfrm6_policy.c	net: Add l3mdev index to flow struct and avoid oif reset for port devices	2022-03-15 20:20:02 -07:00
xfrm6_protocol.c	xfrm: add support for UDPv6 encapsulation of ESP	2020-04-28 11:28:36 +02:00
xfrm6_state.c	xfrm: remove output_finish indirection from xfrm_state_afinfo	2020-05-06 09:40:08 +02:00
xfrm6_tunnel.c	xfrm: remove description from xfrm_type struct	2021-06-09 09:38:52 +02:00