From: Eric Dumazet <eduma...@google.com> Date: Wed, 27 Mar 2019 12:40:33 -0700
> According to Amit Klein and Benny Pinkas, IP ID generation is too weak > and might be used by attackers. > > Even with recent net_hash_mix() fix (netns: provide pure entropy for > net_hash_mix()) > having 64bit key and Jenkins hash is risky. > > It is time to switch to siphash and its 128bit keys. > > Signed-off-by: Eric Dumazet <eduma...@google.com> > Reported-by: Amit Klein <aksecur...@gmail.com> > Reported-by: Benny Pinkas <be...@pinkas.net> Applied to net-next.
