netdev - [RFC 0/2] TCP: Add TCP-AO support

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <396556a20805301217k293e5718h6bbf02bfe069030@europa>
Date:	Fri, 18 Jul 2008 17:22:10 -0700
From:	"Adam Langley" <agl@...erialviolet.org>
To:	netdev@...r.kernel.org
Subject: [RFC 0/2] TCP: Add TCP-AO support

This is an experimental pair of patches which adds support for TCP-AO[1]. AO
(Auth option) is the replacement for TCP MD5 signatures, adding different MAC
functions, shorter functions, key rotation etc. See the comments at the top of
the 2/2 patch for details.

This patch still supports the TCP MD5 setsockopt as always, it's just a wrapper
around the TCP-AO code now.

The 1/2 patch is just a rename patch (s/md5sig/auth/ more of less). It gets its
own patch because, otherwise, you wouldn't be able to see the actual changes
for the noise.

This is only intended for comments on the userland interface and for anyone who
wishes to play with it. If you're in the latter set, I have a netcat-like tool
which can use the new interfaces.

[1] http://www.ietf.org/internet-drafts/draft-ietf-tcpm-tcp-auth-opt-01.txt
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html