lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Wed, 13 May 2015 12:19:42 +0200 From: Steffen Klassert <steffen.klassert@...unet.com> To: Herbert Xu <herbert@...dor.apana.org.au> CC: <netdev@...r.kernel.org> Subject: Re: esp6: Use high-order sequence number bits for IV generation On Wed, May 13, 2015 at 03:27:18PM +0800, Herbert Xu wrote: > I noticed we were only using the low-order bits for IV generation > when ESN is enabled. This is very bad because it means that the > IV can repeat. We must use the full 64 bits. > > Signed-off-by: Herbert Xu <herbert@...dor.apana.org.au> Also applied to the ipsec tree. Thanks a lot Herbert! -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists