You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Steffen Klassert 3b59df46a4 xfrm: Workaround incompatibility of ESN and async crypto ... ESN for esp is defined in RFC 4303. This RFC assumes that the sequence number counters are always up to date. However, this is not true if an async crypto algorithm is employed. If the sequence number counters are not up to date on sequence number check, we may incorrectly update the upper 32 bit of the sequence number. This leads to a DOS. We workaround this by comparing the upper sequence number, (used for authentication) with the upper sequence number computed after the async processing. We drop the packet if these numbers are different. To do this, we introduce a recheck function that does this check in the ESN case. Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com> Acked-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net>		13 years ago
..
Kconfig	xfrm: make xfrm_algo.c a module	13 years ago
Makefile	xfrm: make xfrm_algo.c a module	13 years ago
xfrm_algo.c	xfrm_algo: drop an unnecessary inclusion	13 years ago
xfrm_hash.c	…
xfrm_hash.h	net: cleanup unsigned to unsigned int	13 years ago
xfrm_input.c	xfrm: Workaround incompatibility of ESN and async crypto	13 years ago
xfrm_ipcomp.c	net: add skb frag size accessors	13 years ago
xfrm_output.c	xfrm: Remove unused xfrm_state from xfrm_state_check_space	13 years ago
xfrm_policy.c	net: ipv6: fix oops in inet_putpeer()	13 years ago
xfrm_proc.c	net: Add export.h for EXPORT_SYMBOL/THIS_MODULE to non-modules	13 years ago
xfrm_replay.c	xfrm: Workaround incompatibility of ESN and async crypto	13 years ago
xfrm_state.c	net/xfrm/xfrm_state.c: fix error return code	13 years ago
xfrm_sysctl.c	net: Convert all sysctl registrations to register_net_sysctl	13 years ago
xfrm_user.c	netlink: add netlink_kernel_cfg parameter to netlink_kernel_create	13 years ago