Re: [PATCH v3] siphash: add cryptographically secure hashtable function

From: Jason A. Donenfeld
Date: Mon Dec 12 2016 - 18:04:38 EST


On Tue, Dec 13, 2016 at 12:01 AM, Andi Kleen <ak@xxxxxxxxxxxxxxx> wrote:
> It would be nice if the network code could be converted to use siphash
> for the secure sequence numbers. Right now it pulls in a lot of code
> for bigger secure hashes just for that, which is a problem for tiny
> kernels.

Indeed this would be a great first candidate. There are lots of places
where MD5 (!!) is pulled in for this sort of thing, when SipHash could
be a faster and leaner replacement (and arguably more secure than
rusty MD5).