Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b56164b9ed
NetBSD/sys/netinet6
History
jonathan 995c532c33 Revert the (default) ip_id algorithm to the pre-randomid algorithm, 
due to demonstrated low-period repeated IDs from the randomized IP_id
code.  Consensus is that the low-period repetition (much less than
2^15) is not suitable for general-purpose use.

Allocators of new IPv4 IDs should now call the function ip_newid().
Randomized IP_ids is now a config-time option, "options RANDOM_IP_ID".
ip_newid() can use ip_random-id()_IP_ID if and only if configured
with RANDOM_IP_ID. A sysctl knob should be  provided.

This API may be reworked in the near future to support linear ip_id
counters per (src,dst) IP-address pair.
2003-11-17 21:34:27 +00:00
..
ah_aesxcbcmac.c AES XCBC MAC (for AH) 2003-07-25 09:48:17 +00:00
ah_aesxcbcmac.h AES XCBC MAC (for AH) 2003-07-25 09:48:17 +00:00
ah_core.c minor KNF 2003-07-25 10:17:36 +00:00
ah_input.c fix uninitialized variables 2003-10-25 08:26:14 +00:00
ah_output.c - prepare for RFC2401bis 64bit sequence number (no behavior change yet) 2003-09-07 15:59:36 +00:00
ah.h increase AH_MAXSUMSIZE to 512/8, for hmac-sha2-512 2003-08-05 12:20:35 +00:00
dest6.c always use PULLDOWN_TEST codepath. 2003-05-14 06:47:33 +00:00
esp_aesctr.c AES XCBC MAC (for AH) 2003-07-25 09:48:17 +00:00
esp_aesctr.h AES XCBC MAC (for AH) 2003-07-25 09:48:17 +00:00
esp_core.c Use BF_ecb_encrypt() instead of using BF_encrypt()/BF_decrypt() 2003-08-27 00:08:31 +00:00
esp_input.c fix uninitialized variables 2003-10-25 08:26:14 +00:00
esp_output.c - prepare for RFC2401bis 64bit sequence number (no behavior change yet) 2003-09-07 15:59:36 +00:00
esp_rijndael.c simplify rijndael.c API - always schedule encrypt/decrypt key. 2003-08-27 14:23:25 +00:00
esp_rijndael.h change ESP xx_schedlen() return type to size_t. sync w/kame 2003-07-20 03:24:03 +00:00
esp.h change ESP xx_schedlen() return type to size_t. sync w/kame 2003-07-20 03:24:03 +00:00
files.ipsec separate netkey/key* and netipsec/key* 2003-09-20 05:14:41 +00:00
files.netinet6 randomize IPv4/v6 fragment ID and IPv6 flowlabel. avoids predictability 2003-09-06 03:36:30 +00:00
frag6.c randomize IPv4/v6 fragment ID and IPv6 flowlabel. avoids predictability 2003-09-06 03:36:30 +00:00
icmp6.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
in6_cksum.c Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 16:26:28 +00:00
in6_gif.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
in6_gif.h
in6_ifattach.c committed by mistake, sorry 2003-09-06 04:20:57 +00:00
in6_ifattach.h
in6_pcb.c use hash table for in6_pcbbind(). similar to in_pcb 1.89 -> 1.90 2003-11-05 01:20:56 +00:00
in6_pcb.h revamp inpcb/in6pcb so that they are more aligned with each other. 2003-09-04 09:16:57 +00:00
in6_proto.c Revert the change in default value of ipv6_v6only. Further discussion 2003-11-03 15:12:06 +00:00
in6_src.c revamp inpcb/in6pcb so that they are more aligned with each other. 2003-09-04 09:16:57 +00:00
in6_var.h define struct prf_ra outside of in6_prflags, to be c++ friendly. sync w/kame 2003-10-15 01:28:28 +00:00
in6.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
in6.h implement net.inet6.ifq 2003-11-12 15:25:19 +00:00
ip6_forward.c Do a jump optimization that eliminates some uninitialized variable warnings. 2003-10-29 10:12:43 +00:00
ip6_id.c exp is a reserved name under posix 2003-09-16 00:31:23 +00:00
ip6_input.c implement net.inet6.ifq 2003-11-12 15:25:19 +00:00
ip6_mroute.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
ip6_mroute.h on interface detach, clear multicast forwarding table. from kame 2003-07-08 10:20:45 +00:00
ip6_output.c correct behavior when ipv6mr_interface is 0. Matthias Drochner 2003-11-06 06:10:51 +00:00
ip6_var.h randomize IPv4/v6 fragment ID and IPv6 flowlabel. avoids predictability 2003-09-06 03:36:30 +00:00
ip6protosw.h Move UCB-licensed code from 4-clause to 3-clause licence. 2003-08-07 16:26:28 +00:00
ipcomp_core.c
ipcomp_input.c typo. found by markus@openbsd 2003-07-02 13:55:13 +00:00
ipcomp_output.c
ipcomp.h
ipsec.c Revert the (default) ip_id algorithm to the pre-randomid algorithm, 2003-11-17 21:34:27 +00:00
ipsec.h mark security policy that should persist in the system "persistent". 2003-09-22 04:47:43 +00:00
Makefile
mld6_var.h - sync up MLD declaration with RFC3542 (s/MLD6/MLD/) 2003-06-06 08:13:43 +00:00
mld6.c change the additional arg to be passed to ip{,6}_output to struct socket *. 2003-08-22 21:53:01 +00:00
nd6_nbr.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
nd6_rtr.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
nd6.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
nd6.h split ND6 cache timer management to per-entry. increased accuracy, 2003-06-27 08:41:08 +00:00
pim6_var.h
pim6.h
raw_ip6.c Remove some assigned-to but otherwise unused variables. 2003-10-30 01:43:08 +00:00
raw_ip6.h
route6.c - sync up MLD declaration with RFC3542 (s/MLD6/MLD/) 2003-06-06 08:13:43 +00:00
udp6_output.c u_short -> u_int16_t. sync w/ kame. 2003-09-05 23:20:48 +00:00
udp6_usrreq.c fix uninitialized variables 2003-10-25 08:26:14 +00:00
udp6_var.h revamp inpcb/in6pcb so that they are more aligned with each other. 2003-09-04 09:16:57 +00:00
udp6.h