netdev - Re: Does the kernel IPv6 module plan to implement Secure Neighbor Discovery?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Thu, 24 Jan 2019 04:53:32 +0000
From:   Ttttabcd <ttttabcd@...tonmail.com>
To:     "ebiederm@...ssion.com" <ebiederm@...ssion.com>
Cc:     Netdev <netdev@...r.kernel.org>
Subject: Re: Does the kernel IPv6 module plan to implement Secure Neighbor Discovery?

>
> Usually it requires someone motivated to step up and do the work. You
> sound motivated. The easiest thing would be for you to step up and
> write the implementation.
>
> Having looked at this once long ago my memory is that SeND only protects
> against an attacker on a local lan. That is not an attack scenario I am
> particularly worried about. If my memory is correct there are
> additional issues with how you perform the initial key distribution.
> All of which is why I am personally not interested.
>
> But if you are interested and would like to make this happen more power
> to you.
>
> Eric

I also thought about implementing it myself, but I am still a kernel beginner.

I am learning the source implementation of the network protocol stack, but I think there is still a long way to go to implement a complete function.

I will work hard, I hope to contribute to the kernel, thank you