Messages in this thread | | | From | "Jason A. Donenfeld" <> | Date | Tue, 13 Dec 2016 00:04:27 +0100 | Subject | Re: [PATCH v3] siphash: add cryptographically secure hashtable function |
| |
On Tue, Dec 13, 2016 at 12:01 AM, Andi Kleen <ak@linux.intel.com> wrote: > It would be nice if the network code could be converted to use siphash > for the secure sequence numbers. Right now it pulls in a lot of code > for bigger secure hashes just for that, which is a problem for tiny > kernels.
Indeed this would be a great first candidate. There are lots of places where MD5 (!!) is pulled in for this sort of thing, when SipHash could be a faster and leaner replacement (and arguably more secure than rusty MD5).
| |