Florian Westphal 8c27bd75f0
tcp: syncookies: reduce cookie lifetime to 128 seconds ...
We currently accept cookies that were created less than 4 minutes ago
(ie, cookies with counter delta 0-3). Combined with the 8 mss table
values, this yields 32 possible values (out of 2**32) that will be valid.
Reducing the lifetime to < 2 minutes halves the guessing chance while
still providing a large enough period.
While at it, get rid of jiffies value -- they overflow too quickly on
32 bit platforms.
getnstimeofday is used to create a counter that increments every 64s.
perf shows getnstimeofday cost is negible compared to sha_transform;
normal tcp initial sequence number generation uses getnstimeofday, too.
Reported-by: Jakob Lell <jakob@jakoblell.com >
Signed-off-by: Florian Westphal <fw@strlen.de >
Signed-off-by: David S. Miller <davem@davemloft.net >
2013-09-24 10:39:58 -04:00
2013-09-11 12:34:13 -07:00
2013-09-23 16:29:41 -04:00
2013-09-23 16:29:41 -04:00
2013-09-23 16:29:42 -04:00
2013-09-23 16:29:42 -04:00
2013-08-14 01:12:58 +02:00
2013-09-23 16:29:42 -04:00
2013-08-31 22:30:01 -04:00
2013-08-10 01:16:44 -07:00
2013-08-28 17:45:48 -04:00
2013-08-29 14:08:24 -04:00
2013-09-05 14:54:29 -07:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-04 14:53:20 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-04 00:27:25 -04:00
2013-09-21 14:01:38 -04:00
2013-09-04 00:27:25 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:39 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-08-29 14:08:24 -04:00
2013-09-04 14:53:20 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:39 -04:00
2013-09-21 14:01:39 -04:00
2013-09-21 14:01:39 -04:00
2013-09-21 14:01:39 -04:00
2013-09-05 14:54:29 -07:00
2013-09-21 14:01:39 -04:00
2013-09-21 14:01:39 -04:00
2013-09-23 01:51:07 -04:00
2013-08-31 00:32:32 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:09 -04:00
2013-09-20 14:41:02 -04:00
2013-09-23 01:51:09 -04:00
2013-09-23 01:51:09 -04:00
2013-09-23 01:51:09 -04:00
2013-09-23 01:51:09 -04:00
2013-09-24 10:39:58 -04:00
2013-09-23 16:29:40 -04:00
2013-09-23 16:29:40 -04:00
2013-09-05 12:44:30 -04:00
2013-09-23 16:29:40 -04:00
2013-09-23 16:29:41 -04:00
2013-09-23 16:29:41 -04:00
2013-09-23 16:29:41 -04:00
8c27bd75f0