Messages in this thread | | | Subject | Re: [PATCH net-next] ipv6: use prandom_u32() for ID generation | From | patchwork-bot+netdevbpf@kernel ... | Date | Tue, 01 Jun 2021 05:20:05 +0000 |
| |
Hello:
This patch was applied to netdev/net-next.git (refs/heads/master):
On Sat, 29 May 2021 13:07:46 +0200 you wrote: > This is a complement to commit aa6dd211e4b1 ("inet: use bigger hash > table for IP ID generation"), but focusing on some specific aspects > of IPv6. > > Contary to IPv4, IPv6 only uses packet IDs with fragments, and with a > minimum MTU of 1280, it's much less easy to force a remote peer to > produce many fragments to explore its ID sequence. In addition packet > IDs are 32-bit in IPv6, which further complicates their analysis. On > the other hand, it is often easier to choose among plenty of possible > source addresses and partially work around the bigger hash table the > commit above permits, which leaves IPv6 partially exposed to some > possibilities of remote analysis at the risk of weakening some > protocols like DNS if some IDs can be predicted with a good enough > probability. > > [...]
Here is the summary with links: - [net-next] ipv6: use prandom_u32() for ID generation https://git.kernel.org/netdev/net-next/c/62f20e068ccc
You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html
| |