1. 21 Oct, 2019 1 commit
  2. 13 Aug, 2019 1 commit
    • Jason A. Donenfeld's avatar
      siphash: add cryptographically secure PRF · babc199b
      Jason A. Donenfeld authored
      CVE-2019-10638
      
      SipHash is a 64-bit keyed hash function that is actually a
      cryptographically secure PRF, like HMAC. Except SipHash is super fast,
      and is meant to be used as a hashtable keyed lookup function, or as a
      general PRF for short input use cases, such as sequence numbers or RNG
      chaining.
      
      For the first usage:
      
      There are a variety of attacks known as "hashtable poisoning" in which an
      attacker forms some data such that the hash of that data will be the
      same, and then preceeds to fill up all entries of a hashbucket. This is
      a realistic and well-known denial-of-service vector. Currently
      hashtables use jhash, which is fast but not secure, and some kind of
      rotating key scheme (or none at all, which isn't good). SipHash is meant
      as a replacement for jhash in these cases.
      
      There are a modicum of places in the kernel that are vulnerable to
      hashtable poisoning attacks, either via userspace vectors or network
      vectors, and there's not a reliable mechanism inside the k...
      babc199b
  3. 16 Jan, 2019 1 commit
  4. 20 Jun, 2017 1 commit
  5. 08 Nov, 2016 2 commits
  6. 26 Oct, 2016 1 commit
  7. 29 Aug, 2016 2 commits
  8. 09 Aug, 2016 1 commit
  9. 28 Jun, 2016 1 commit
  10. 16 May, 2016 1 commit
  11. 21 Apr, 2016 1 commit
  12. 06 Apr, 2016 3 commits
  13. 29 Feb, 2016 9 commits
  14. 25 Feb, 2016 1 commit
  15. 14 Dec, 2015 1 commit
  16. 12 Dec, 2015 1 commit
  17. 06 Dec, 2015 1 commit
  18. 03 Dec, 2015 1 commit
  19. 02 Dec, 2015 1 commit
  20. 26 Nov, 2015 1 commit
  21. 23 Nov, 2015 2 commits
  22. 21 Nov, 2015 2 commits
  23. 20 Nov, 2015 1 commit
  24. 18 Nov, 2015 1 commit
  25. 17 Nov, 2015 2 commits