Re: [PATCH net-next] ipv6: use prandom_u32() for ID generation
Date: Tue Jun 01 2021 - 01:20:45 EST
This patch was applied to netdev/net-next.git (refs/heads/master):
On Sat, 29 May 2021 13:07:46 +0200 you wrote:
> This is a complement to commit aa6dd211e4b1 ("inet: use bigger hash
> table for IP ID generation"), but focusing on some specific aspects
> of IPv6.
> Contary to IPv4, IPv6 only uses packet IDs with fragments, and with a
> minimum MTU of 1280, it's much less easy to force a remote peer to
> produce many fragments to explore its ID sequence. In addition packet
> IDs are 32-bit in IPv6, which further complicates their analysis. On
> the other hand, it is often easier to choose among plenty of possible
> source addresses and partially work around the bigger hash table the
> commit above permits, which leaves IPv6 partially exposed to some
> possibilities of remote analysis at the risk of weakening some
> protocols like DNS if some IDs can be predicted with a good enough
Here is the summary with links:
- [net-next] ipv6: use prandom_u32() for ID generation
You are awesome, thank you!
Deet-doot-dot, I am a bot.