linux-kernel - Re: [PATCH 11/12] selftests/net: Add TCP-AO selfconnect/simultaneous connect test

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <ZYAM6ioeJEq5FnJf@Laptop-X1>
Date: Mon, 18 Dec 2023 17:12:10 +0800
From: Hangbin Liu <liuhangbin@...il.com>
To: Dmitry Safonov <dima@...sta.com>
Cc: Shuah Khan <shuah@...nel.org>, David Ahern <dsahern@...nel.org>,
	"David S. Miller" <davem@...emloft.net>,
	Eric Dumazet <edumazet@...gle.com>,
	Jakub Kicinski <kuba@...nel.org>, Paolo Abeni <pabeni@...hat.com>,
	Salam Noureddine <noureddine@...sta.com>,
	Bob Gilligan <gilligan@...sta.com>, linux-kernel@...r.kernel.org,
	linux-kselftest@...r.kernel.org, netdev@...r.kernel.org,
	Dmitry Safonov <0x7f454c46@...il.com>
Subject: Re: [PATCH 11/12] selftests/net: Add TCP-AO selfconnect/simultaneous
 connect test

On Fri, Dec 15, 2023 at 02:36:25AM +0000, Dmitry Safonov wrote:
> Check that a rare functionality of TCP named self-connect works with
> TCP-AO. This "under the cover" also checks TCP simultaneous connect
> (TCP_SYN_RECV socket state), which would be harder to check other ways.
> 
> In order to verify that it's indeed TCP simultaneous connect, check
> the counters TCPChallengeACK and TCPSYNChallenge.
> 
> Sample of the output:
> > # ./self-connect_ipv6
> > 1..4
> > # 1738[lib/setup.c:254] rand seed 1696451931
> > TAP version 13
> > ok 1 self-connect(same keyids): connect TCPAOGood 0 => 24
> > ok 2 self-connect(different keyids): connect TCPAOGood 26 => 50
> > ok 3 self-connect(restore): connect TCPAOGood 52 => 97
> > ok 4 self-connect(restore, different keyids): connect TCPAOGood 99 => 144
> > # Totals: pass:4 fail:0 xfail:0 xpass:0 skip:0 error:0
> 
> Signed-off-by: Dmitry Safonov <dima@...sta.com>

Tested-by: Hangbin Liu <liuhangbin@...il.com>