Willy Tarreau b2d057560b secure_seq: use the 64 bits of the siphash for port offset calculation ... SipHash replaced MD5 in secure_ipv{4,6}_port_ephemeral() via commit 7cd23e5300 ("secure_seq: use SipHash in place of MD5"), but the output remained truncated to 32-bit only. In order to exploit more bits from the hash, let's make the functions return the full 64-bit of siphash_3u32(). We also make sure the port offset calculation in __inet_hash_connect() remains done on 32-bit to avoid the need for div_u64_rem() and an extra cost on 32-bit systems. Cc: Jason A. Donenfeld <Jason@zx2c4.com> Cc: Moshe Kol <moshe.kol@mail.huji.ac.il> Cc: Yossi Gilad <yossi.gilad@mail.huji.ac.il> Cc: Amit Klein <aksecurity@gmail.com> Reviewed-by: Eric Dumazet <edumazet@google.com> Signed-off-by: Willy Tarreau <w@1wt.eu> Signed-off-by: Jakub Kicinski <kuba@kernel.org>		2022-05-04 19:22:20 -07:00
..
ila	net: ipv6: check return value of rhashtable_init	2021-09-28 12:59:24 +01:00
netfilter	netfilter: nft_fib: add reduce support	2022-03-20 00:29:47 +01:00
addrconf_core.c	ipv6: add net device refcount tracker to struct inet6_dev	2021-12-06 16:05:11 -08:00
addrconf.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-03-03 11:55:12 -08:00
addrlabel.c
af_inet6.c	ipv6: annotate some data-races around sk->sk_prot	2022-02-18 11:53:28 +00:00
ah6.c	ipv6: ah6: use swap() to make code cleaner	2021-11-18 12:00:15 +00:00
anycast.c
calipso.c
datagram.c
esp6_offload.c	net: Fix esp GSO on inter address family tunnels.	2022-03-07 13:14:04 +01:00
esp6.c	esp: limit skb_page_frag_refill use to a single page	2022-04-13 10:16:11 +02:00
exthdrs_core.c
exthdrs_offload.c
exthdrs.c	ipv6: partially inline ipv6_fixup_options	2022-01-27 19:46:11 -08:00
fib6_notifier.c
fib6_rules.c	ipv6: change fib6_rules_net_exit() to batch mode	2022-02-08 20:41:34 -08:00
fou6.c
icmp.c	ipv6: do not use per netns icmp sockets	2022-01-25 11:25:21 +00:00
inet6_connection_sock.c
inet6_hashtables.c	secure_seq: use the 64 bits of the siphash for port offset calculation	2022-05-04 19:22:20 -07:00
ioam6_iptunnel.c	ipv6: ioam: Insertion frequency in lwtunnel output	2022-02-04 20:24:45 -08:00
ioam6.c	net: ipv6: Get rcv timestamp if needed when handling hop-by-hop IOAM option	2022-03-03 14:38:48 +00:00
ip6_checksum.c
ip6_fib.c	ipv6: annotate accesses to fn->fn_sernum	2022-01-20 20:18:37 -08:00
ip6_flowlabel.c	ipv6: per-netns exclusive flowlabel checks	2022-02-16 20:37:47 -08:00
ip6_gre.c	ip_gre, ip6_gre: Fix race condition on o_seqno in collect_md mode	2022-04-25 11:40:45 +01:00
ip6_icmp.c
ip6_input.c	net: Postpone skb_clear_delivery_time() until knowing the skb is delivered locally	2022-03-03 14:38:48 +00:00
ip6_offload.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-02-24 17:54:25 -08:00
ip6_offload.h
ip6_output.c	ipv6: fix panic when forwarding a pkt with no in6 dev	2022-04-11 12:28:43 +01:00
ip6_tunnel.c	ip6_tunnel: fix possible NULL deref in ip6_tnl_xmit	2022-02-09 11:56:19 +00:00
ip6_udp_tunnel.c
ip6_vti.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-12-30 12:12:12 -08:00
ip6mr.c	net: ipv6mr: fix unused variable warning with CONFIG_IPV6_PIMSM_V2=n	2022-04-06 15:14:30 +01:00
ipcomp6.c
ipv6_sockglue.c	ipv6: annotate some data-races around sk->sk_prot	2022-02-18 11:53:28 +00:00
Kconfig	ipv6: ioam: Add support for the ip6ip6 encapsulation	2021-10-04 12:53:35 +01:00
Makefile	net: ipv6: use ipv6-y directly instead of ipv6-objs	2021-09-28 13:13:40 +01:00
mcast_snoop.c
mcast.c	mld: respect RCU rules in ip6_mc_source() and ip6_mc_msfilter()	2022-04-30 15:19:08 +01:00
mip6.c
ndisc.c	ipv6: separate ndisc_ns_create() from ndisc_send_ns()	2022-02-21 12:13:45 +00:00
netfilter.c	netfilter: Update ip6_route_me_harder to consider L3 domain	2022-04-25 11:09:20 +02:00
output_core.c
ping.c	net: ping6: support setting basic SOL_IPV6 options via cmsg	2022-02-17 14:22:09 +00:00
proc.c
protocol.c
raw.c	ipv6: raw: check passed optlen before reading	2021-12-29 12:32:56 -08:00
reassembly.c	net: ipv6: Handle delivery_time in ipv6 defrag	2022-03-03 14:38:48 +00:00
route.c	ipv6: make ip6_rt_gc_expire an atomic_t	2022-04-15 14:28:50 -07:00
rpl_iptunnel.c
rpl.c
seg6_hmac.c	net: ipv6: check return value of rhashtable_init	2021-09-28 12:59:24 +01:00
seg6_iptunnel.c	seg6: fix the iif in the IPv6 socket control block	2021-12-09 07:55:42 -08:00
seg6_local.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-01-05 14:36:10 -08:00
seg6.c	icmp: ICMPV6: Examine invoking packet for Segment Route Headers.	2022-01-04 12:17:35 +00:00
sit.c	sit: allow encapsulated IPv6 traffic to be delivered locally	2022-01-12 13:56:07 -08:00
syncookies.c	tcp: make sure treq->af_specific is initialized	2022-04-25 12:10:11 +01:00
sysctl_net_ipv6.c
tcp_ipv6.c	skb: make drop reason booleanable	2022-03-09 11:22:58 +00:00
tcpv6_offload.c	net: move gro definitions to include/net/gro.h	2021-11-16 13:16:54 +00:00
tunnel6.c
udp_impl.h
udp_offload.c	gro: remove rcu_read_lock/rcu_read_unlock from gro_receive handlers	2021-11-24 17:21:42 -08:00
udp.c	ipv6: Add reasons for skb drops to __udp6_lib_rcv	2022-02-14 11:24:39 +00:00
udplite.c
xfrm6_input.c
xfrm6_output.c	xfrm: fix tunnel model fragmentation behavior	2022-03-01 12:08:40 +01:00
xfrm6_policy.c	net: Add l3mdev index to flow struct and avoid oif reset for port devices	2022-03-15 20:20:02 -07:00
xfrm6_protocol.c
xfrm6_state.c
xfrm6_tunnel.c