| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 24 Oct 2012 12:01:57 -0400
From: Neil Horman <nhorman@...driver.com>
To: Vlad Yasevich <vyasevich@...il.com>
Cc: linux-sctp@...r.kernel.org,
"David S. Miller" <davem@...emloft.net>, netdev@...r.kernel.org
Subject: Re: [PATCH] Make hmac algorithm selection for cookie generation
dynamic
On Wed, Oct 24, 2012 at 10:32:00AM -0400, Vlad Yasevich wrote:
> On 10/19/2012 11:52 AM, Neil Horman wrote:
> >Currently sctp allows for the optional use of md5 of sha1 hmac algorithms to
> >generate cookie values when establishing new connections via two build time
> >config options. Theres no real reason to make this a static selection. We can
> >add a sysctl that allows for the dynamic selection of these algorithms at run
> >time, with the default value determined by the corresponding crypto library
> >config options. It saves us two needless configuration settings and enables the
> >freedom for administrators to select which algorithm a particular system uses.
> >This comes in handy when, for example running a system in FIPS mode, where use
> >of md5 is disallowed, but SHA1 is permitted.
> >
> >Note: This new sysctl has no corresponding socket option to select the cookie
> >hmac algorithm. I chose not to implement that intentionally, as RFC 6458
> >contains no option for this value, and I opted not to pollute the socket option
> >namespace.
> >
> >Signed-off-by: Neil Horman <nhorman@...driver.com>
> >CC: Vlad Yasevich <vyasevich@...il.com>
> >CC: "David S. Miller" <davem@...emloft.net>
> >CC: netdev@...r.kernel.org
> >---
> > Documentation/networking/ip-sysctl.txt | 14 ++++++++
> > include/net/netns/sctp.h | 3 ++
> > include/net/sctp/constants.h | 8 -----
> > include/net/sctp/structs.h | 1 +
> > net/sctp/Kconfig | 30 -----------------
> > net/sctp/protocol.c | 9 ++++++
> > net/sctp/socket.c | 11 ++++---
> > net/sctp/sysctl.c | 59 ++++++++++++++++++++++++++++++++++
> > 8 files changed, 93 insertions(+), 42 deletions(-)
> >
> >diff --git a/Documentation/networking/ip-sysctl.txt b/Documentation/networking/ip-sysctl.txt
> >index c7fc107..98ac0d7 100644
> >--- a/Documentation/networking/ip-sysctl.txt
> >+++ b/Documentation/networking/ip-sysctl.txt
> >@@ -1514,6 +1514,20 @@ cookie_preserve_enable - BOOLEAN
> >
> > Default: 1
> >
> >+cookie_hmac_alg - STRING
> >+ Select the hmac algorithm used when generating the cookie value sent by
> >+ a listening sctp socket to a connecting client in the INIT-ACK chunk.
> >+ Valid values are:
> >+ * md5
> >+ * sha1
> >+ * none
> >+ Ability to assign md5 or sha1 as the selected alg is predicated on the
> >+ configuarion of those algorithms at build time (CONFIG_CRYPTO_MD5 and
> >+ CONFIG_CRYPTO_SHA1).
> >+
> >+ Default: Dependent on configuration. MD5 if available, else SHA1 if
> >+ available, else none.
> >+
> > rcvbuf_policy - INTEGER
> > Determines if the receive buffer is attributed to the socket or to
> > association. SCTP supports the capability to create multiple
> >diff --git a/include/net/netns/sctp.h b/include/net/netns/sctp.h
> >index 5e5eb1f..3573a81 100644
> >--- a/include/net/netns/sctp.h
> >+++ b/include/net/netns/sctp.h
> >@@ -62,6 +62,9 @@ struct netns_sctp {
> > /* Whether Cookie Preservative is enabled(1) or not(0) */
> > int cookie_preserve_enable;
> >
> >+ /* The namespace default hmac alg */
> >+ char *sctp_hmac_alg;
> >+
> > /* Valid.Cookie.Life - 60 seconds */
> > unsigned int valid_cookie_life;
> >
> >diff --git a/include/net/sctp/constants.h b/include/net/sctp/constants.h
> >index d053d2e..c29707d 100644
> >--- a/include/net/sctp/constants.h
> >+++ b/include/net/sctp/constants.h
> >@@ -312,14 +312,6 @@ enum { SCTP_MAX_GABS = 16 };
> > * functions simpler to write.
> > */
> >
> >-#if defined (CONFIG_SCTP_HMAC_MD5)
> >-#define SCTP_COOKIE_HMAC_ALG "hmac(md5)"
> >-#elif defined (CONFIG_SCTP_HMAC_SHA1)
> >-#define SCTP_COOKIE_HMAC_ALG "hmac(sha1)"
> >-#else
> >-#define SCTP_COOKIE_HMAC_ALG NULL
> >-#endif
> >-
> > /* These return values describe the success or failure of a number of
> > * routines which form the lower interface to SCTP_outqueue.
> > */
> >diff --git a/include/net/sctp/structs.h b/include/net/sctp/structs.h
> >index 0fef00f..ce5f957 100644
> >--- a/include/net/sctp/structs.h
> >+++ b/include/net/sctp/structs.h
> >@@ -177,6 +177,7 @@ struct sctp_sock {
> >
> > /* Access to HMAC transform. */
> > struct crypto_hash *hmac;
> >+ char *sctp_hmac_alg;
> >
> > /* What is our base endpointer? */
> > struct sctp_endpoint *ep;
> >diff --git a/net/sctp/Kconfig b/net/sctp/Kconfig
> >index 126b014..44ffd3e 100644
> >--- a/net/sctp/Kconfig
> >+++ b/net/sctp/Kconfig
> >@@ -9,7 +9,6 @@ menuconfig IP_SCTP
> > select CRYPTO
> > select CRYPTO_HMAC
> > select CRYPTO_SHA1
> >- select CRYPTO_MD5 if SCTP_HMAC_MD5
> > select LIBCRC32C
> > ---help---
> > Stream Control Transmission Protocol
> >@@ -68,33 +67,4 @@ config SCTP_DBG_OBJCNT
> >
> > If unsure, say N
> >
> >-choice
> >- prompt "SCTP: Cookie HMAC Algorithm"
> >- default SCTP_HMAC_MD5
>
> Did you intend to change the default algorithm to SHA1? Seems a bit
> unintended and undocumented.
>
Thats not what I did (or at least not my intention). The sctp_net_init code
checks teh crypto options and if md5 is selcted as on, it uses that as a
default, only if its not selected, does sha1 become the default. In my testing
this worked properly, and the sysctl for the init_net came up as md5, even
though I had both md5 and sha1 configured. Is there something else here I'm
missing?
> Would it make more sense to to change from a choice to sub-menu and
> allow selection of multiple algorithms? Then use the interface you
> have to change the default.
>
Not sure I follow. You mean create a sub-menu allowing us to choose the default
value at compile time, and allow overriding from there via sysctl? I'm fine with
such a change, although given that everyone seems used to the idea of md5 being
the default when configured, as well as the idea of needing to override default
sysctl values, I'm not sure is necessecary.
Let me know about the default, and if I'm on the same page as you regarding the
config option, and I can repost this.
Thanks!
Neil
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists