David S. Miller 6e5714eaf7 net: Compute protocol sequence numbers and fragment IDs using MD5. ... Computers have become a lot faster since we compromised on the partial MD4 hash which we use currently for performance reasons. MD5 is a much safer choice, and is inline with both RFC1948 and other ISS generators (OpenBSD, Solaris, etc.) Furthermore, only having 24-bits of the sequence number be truly unpredictable is a very serious limitation. So the periodic regeneration and 8-bit counter have been removed. We compute and use a full 32-bit sequence number. For ipv6, DCCP was found to use a 32-bit truncated initial sequence number (it needs 43-bits) and that is fixed here as well. Reported-by: Dan Kaminsky <dan@doxpara.com> Tested-by: Willy Tarreau <w@1wt.eu> Signed-off-by: David S. Miller <davem@davemloft.net>		2011-08-06 18:33:19 -07:00
..
ccids	dccp ccid-2: Perform congestion-window validation	2011-07-04 12:37:49 -06:00
ackvec.c
ackvec.h
ccid.c	dccp: cosmetics of info message	2011-07-04 12:37:13 -06:00
ccid.h
dccp.h	dccp: fix bug in updating the GSR	2011-01-07 12:22:43 +01:00
diag.c
feat.c
feat.h
input.c	dccp: Clean up slow-path input processing	2011-07-04 12:36:33 -06:00
ipv4.c	net: Compute protocol sequence numbers and fragment IDs using MD5.	2011-08-06 18:33:19 -07:00
ipv6.c	net: Compute protocol sequence numbers and fragment IDs using MD5.	2011-08-06 18:33:19 -07:00
ipv6.h
Kconfig
Makefile
minisocks.c
options.c	dccp: handle invalid feature options length	2011-05-06 13:05:50 -07:00
output.c	dccp: combine the functionality of enqeueing and cloning	2011-07-04 12:36:47 -06:00
probe.c
proto.c
qpolicy.c
sysctl.c	dccp: make upper bound for seq_window consistent on 32/64 bit	2011-01-07 12:22:44 +01:00
timer.c