HomeFreeBSD

in_pcb: use jenkins hash over the entire IPv6 (or IPv4) address

Description

in_pcb: use jenkins hash over the entire IPv6 (or IPv4) address

The intent is to provide more entropy than can be provided
by just the 32-bits of the IPv6 address which overlaps with
6to4 tunnels. This is needed to mitigate potential algorithmic
complexity attacks from attackers who can control large
numbers of IPv6 addresses.

Together with: gallatin
Reviewed by: dwmalone, rscheff
Differential revision: https://reviews.freebsd.org/D33254

Details

Provenance
glebiusAuthored on Dec 26 2021, 6:47 PM
Reviewer
dwmalone
Differential Revision
D33254: in_pcb: use jenkins hash over the entire IPv6 (or IPv4) address
Parents
rGeb8dcdeac22d: jail: network epoch protection for IP address lists
Branches
Unknown
Tags
Unknown