Eric Dumazet
a904a0693c
inet: stop leaking jiffies on the wire ...
Historically linux tried to stick to RFC 791, 1122, 2003
for IPv4 ID field generation.
RFC 6864 made clear that no matter how hard we try,
we can not ensure unicity of IP ID within maximum
lifetime for all datagrams with a given source
address/destination address/protocol tuple.
Linux uses a per socket inet generator (inet_id), initialized
at connection startup with a XOR of 'jiffies' and other
fields that appear clear on the wire.
Thiemo Nagel pointed that this strategy is a privacy
concern as this provides 16 bits of entropy to fingerprint
devices.
Let's switch to a random starting point, this is just as
good as far as RFC 6864 is concerned and does not leak
anything critical.
Fixes: 1da177e4c3
2019-11-01 14:57:52 -07:00
crypto: amcc - switch to AES library for GCM key derivation
2019-07-26 14:58:12 +10:00
crypto: artpec6 - use devm_platform_ioremap_resource() to simplify code
2019-08-09 15:11:58 +10:00
crypto: bcm/des - switch to new verification routines
2019-08-22 14:39:38 +10:00
crypto: caam - Cast to long first before pointer conversion
2019-09-13 21:20:47 +10:00
crypto: cavium/zip - Add missing single_release()
2019-09-09 23:48:41 +10:00
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-09-18 12:11:14 -07:00
crypto: ccree - enable CTS support in AES-XTS
2019-09-13 21:17:58 +10:00
inet: stop leaking jiffies on the wire
2019-11-01 14:57:52 -07:00
crypto: hisilicon - avoid unused function warning
2019-09-20 23:05:33 +10:00
crypto: inside-secure - Fix unused variable warning when CONFIG_PCI=n
2019-09-20 22:53:09 +10:00
crypto: marvell - Use kzfree rather than its implementation
2019-09-09 23:48:40 +10:00
crypto: mediatek - fix incorrect crypto key setting
2019-09-05 14:36:54 +10:00
crypto: nx - remove unused variables 'nx_driver_string' and 'nx_driver_version'
2019-08-30 18:05:31 +10:00
crypto: qat - Silence smp_processor_id() warning
2019-08-02 14:44:00 +10:00
crypto: qce/des - switch to new verification routines
2019-08-22 14:57:32 +10:00
crypto: rk3288/des - switch to new verification routines
2019-08-22 14:57:32 +10:00
crypto: des - split off DES library from generic DES cipher driver
2019-08-22 14:57:33 +10:00
crypto: sun4i/des - switch to new verification routines
2019-08-22 14:57:32 +10:00
crypto: ux500 - Fix COMPILE_TEST warnings
2019-09-09 23:48:41 +10:00
crypto: drivers - Use kmemdup rather than duplicating its implementation
2019-07-26 15:03:59 +10:00
crypto: vmx/xts - use fallback for ciphertext stealing
2019-08-22 14:57:34 +10:00
crypto: drivers - Remove dev_err() usage after platform_get_irq()
2019-08-09 15:11:38 +10:00
crypto: atmel - Fix -Wunused-const-variable warning
2019-08-30 18:05:31 +10:00
crypto: atmel - Fix -Wunused-const-variable warning
2019-08-30 18:05:31 +10:00
crypto: drivers - Remove dev_err() usage after platform_get_irq()
2019-08-09 15:11:38 +10:00
crypto: atmel-sha204a - Use device-managed registration API
2019-08-02 14:43:59 +10:00
crypto: atmel/des - switch to new verification routines
2019-08-22 14:39:38 +10:00
crypto: exynos - use devm_platform_ioremap_resource() to simplify code
2019-08-09 15:11:59 +10:00
crypto: hifn/des - switch to new verification routines
2019-08-22 14:39:40 +10:00
crypto: img-hash - use devm_platform_ioremap_resource() to simplify code
2019-08-09 15:11:59 +10:00
crypto: ixp4xx/des - switch to new verification routines
2019-08-22 14:57:31 +10:00
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-09-18 12:11:14 -07:00
crypto: drivers - Remove dev_err() usage after platform_get_irq()
2019-08-09 15:11:38 +10:00
crypto: n2 - Rename arrays to avoid conflict with crypto/sha256.h
2019-09-05 14:54:54 +10:00
crypto: drivers - Remove dev_err() usage after platform_get_irq()
2019-08-09 15:11:38 +10:00
crypto: omap/des - switch to new verification routines
2019-08-22 14:57:31 +10:00
crypto: drivers - Remove dev_err() usage after platform_get_irq()
2019-08-09 15:11:38 +10:00
crypto: padlock/aes - switch to library version of key expansion routine
2019-07-26 14:56:02 +10:00
crypto: picoxcell/des - switch to new verification routines
2019-08-22 14:57:31 +10:00
crypto: qcom-rng - use devm_platform_ioremap_resource() to simplify code
2019-08-09 15:12:03 +10:00
crypto: s5p - use correct block size of 1 for ctr(aes)
2019-08-30 18:05:28 +10:00
crypto: drivers - Remove dev_err() usage after platform_get_irq()
2019-08-09 15:11:38 +10:00
crypto: talitos - fix missing break in switch statement
2019-09-20 22:53:08 +10:00
a904a0693c