Re: [PATCH] secure_seq: initialize secret at boot instead of at runtime

2017-01-15 Thread Jason A. Donenfeld
On Sun, Jan 15, 2017 at 4:37 PM, Daniel Borkmann wrote: > commit aebda156a570782a86fc4426842152237a19427d > Author: Eric Dumazet > Date: Mon Apr 29 05:58:52 2013 + > > net: defer net_secret[] initialization Thanks for that. Suspected as much. Should have checked the log first myself. M

Re: [PATCH] secure_seq: initialize secret at boot instead of at runtime

2017-01-15 Thread Daniel Borkmann
On 01/15/2017 03:01 PM, Jason A. Donenfeld wrote: While the static key stuff is fast, it's not as fast as simply not having any code to run. So, this patch generates the secret at boot, rather than at runtime. Signed-off-by: Jason A. Donenfeld --- I can imagine this patch not being desirable be

[PATCH] secure_seq: initialize secret at boot instead of at runtime

2017-01-15 Thread Jason A. Donenfeld
While the static key stuff is fast, it's not as fast as simply not having any code to run. So, this patch generates the secret at boot, rather than at runtime. Signed-off-by: Jason A. Donenfeld --- I can imagine this patch not being desirable because: a) It was done this way in the first place