]> git.baikalelectronics.ru Git - kernel.git/commit
tcp: add some entropy in __inet_hash_connect()
authorEric Dumazet <edumazet@google.com>
Tue, 9 Feb 2021 19:20:28 +0000 (11:20 -0800)
committerDavid S. Miller <davem@davemloft.net>
Thu, 11 Feb 2021 21:13:05 +0000 (13:13 -0800)
commit754a854a99e287031a80886cb7dbff8ae4891c39
tree49afd2838fa108b9b4b796e004da9741430d4c51
parent3617231da78f7c930b5174050f3337fec7e47dbe
tcp: add some entropy in __inet_hash_connect()

Even when implementing RFC 6056 3.3.4 (Algorithm 4: Double-Hash
Port Selection Algorithm), a patient attacker could still be able
to collect enough state from an otherwise idle host.

Idea of this patch is to inject some noise, in the
cases __inet_hash_connect() found a candidate in the first
attempt.

This noise should not significantly reduce the collision
avoidance, and should be zero if connection table
is already well used.

Note that this is not implementing RFC 6056 3.3.5
because we think Algorithm 5 could hurt typical
workloads.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: David Dworken <ddworken@google.com>
Cc: Willem de Bruijn <willemb@google.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/inet_hashtables.c