2 * Copyright (C) 2016 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
5 #include <linux/kernel.h>
6 #include <linux/init.h>
7 #include <linux/cryptohash.h>
8 #include <linux/module.h>
9 #include <linux/cache.h>
10 #include <linux/random.h>
11 #include <linux/hrtimer.h>
12 #include <linux/ktime.h>
13 #include <linux/string.h>
14 #include <linux/net.h>
15 #include <linux/siphash.h>
16 #include <net/secure_seq.h>
18 #if IS_ENABLED(CONFIG_IPV6) || IS_ENABLED(CONFIG_INET)
19 #include <linux/in6.h>
22 static siphash_key_t net_secret __read_mostly
;
23 static siphash_key_t ts_secret __read_mostly
;
25 static __always_inline
void net_secret_init(void)
27 net_get_random_once(&net_secret
, sizeof(net_secret
));
30 static __always_inline
void ts_secret_init(void)
32 net_get_random_once(&ts_secret
, sizeof(ts_secret
));
37 static u32
seq_scale(u32 seq
)
40 * As close as possible to RFC 793, which
41 * suggests using a 250 kHz clock.
42 * Further reading shows this assumes 2 Mb/s networks.
43 * For 10 Mb/s Ethernet, a 1 MHz clock is appropriate.
44 * For 10 Gb/s Ethernet, a 1 GHz clock should be ok, but
45 * we also need to limit the resolution so that the u32 seq
46 * overlaps less than one time per MSL (2 minutes).
47 * Choosing a clock of 64 ns period is OK. (period of 274 s)
49 return seq
+ (ktime_get_real_ns() >> 6);
53 #if IS_ENABLED(CONFIG_IPV6)
54 u32
secure_tcpv6_ts_off(const __be32
*saddr
, const __be32
*daddr
)
57 struct in6_addr saddr
;
58 struct in6_addr daddr
;
59 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
60 .saddr
= *(struct in6_addr
*)saddr
,
61 .daddr
= *(struct in6_addr
*)daddr
,
64 if (sysctl_tcp_timestamps
!= 1)
68 return siphash(&combined
, offsetofend(typeof(combined
), daddr
),
71 EXPORT_SYMBOL(secure_tcpv6_ts_off
);
73 u32
secure_tcpv6_seq(const __be32
*saddr
, const __be32
*daddr
,
74 __be16 sport
, __be16 dport
)
77 struct in6_addr saddr
;
78 struct in6_addr daddr
;
81 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
82 .saddr
= *(struct in6_addr
*)saddr
,
83 .daddr
= *(struct in6_addr
*)daddr
,
90 hash
= siphash(&combined
, offsetofend(typeof(combined
), dport
),
92 return seq_scale(hash
);
94 EXPORT_SYMBOL(secure_tcpv6_seq
);
96 u32
secure_ipv6_port_ephemeral(const __be32
*saddr
, const __be32
*daddr
,
100 struct in6_addr saddr
;
101 struct in6_addr daddr
;
103 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
104 .saddr
= *(struct in6_addr
*)saddr
,
105 .daddr
= *(struct in6_addr
*)daddr
,
109 return siphash(&combined
, offsetofend(typeof(combined
), dport
),
112 EXPORT_SYMBOL(secure_ipv6_port_ephemeral
);
116 u32
secure_tcp_ts_off(__be32 saddr
, __be32 daddr
)
118 if (sysctl_tcp_timestamps
!= 1)
122 return siphash_2u32((__force u32
)saddr
, (__force u32
)daddr
,
126 /* secure_tcp_seq_and_tsoff(a, b, 0, d) == secure_ipv4_port_ephemeral(a, b, d),
127 * but fortunately, `sport' cannot be 0 in any circumstances. If this changes,
128 * it would be easy enough to have the former function use siphash_4u32, passing
129 * the arguments as separate u32.
131 u32
secure_tcp_seq(__be32 saddr
, __be32 daddr
,
132 __be16 sport
, __be16 dport
)
137 hash
= siphash_3u32((__force u32
)saddr
, (__force u32
)daddr
,
138 (__force u32
)sport
<< 16 | (__force u32
)dport
,
140 return seq_scale(hash
);
143 u32
secure_ipv4_port_ephemeral(__be32 saddr
, __be32 daddr
, __be16 dport
)
146 return siphash_3u32((__force u32
)saddr
, (__force u32
)daddr
,
147 (__force u16
)dport
, &net_secret
);
149 EXPORT_SYMBOL_GPL(secure_ipv4_port_ephemeral
);
152 #if IS_ENABLED(CONFIG_IP_DCCP)
153 u64
secure_dccp_sequence_number(__be32 saddr
, __be32 daddr
,
154 __be16 sport
, __be16 dport
)
158 seq
= siphash_3u32((__force u32
)saddr
, (__force u32
)daddr
,
159 (__force u32
)sport
<< 16 | (__force u32
)dport
,
161 seq
+= ktime_get_real_ns();
162 seq
&= (1ull << 48) - 1;
165 EXPORT_SYMBOL(secure_dccp_sequence_number
);
167 #if IS_ENABLED(CONFIG_IPV6)
168 u64
secure_dccpv6_sequence_number(__be32
*saddr
, __be32
*daddr
,
169 __be16 sport
, __be16 dport
)
172 struct in6_addr saddr
;
173 struct in6_addr daddr
;
176 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
177 .saddr
= *(struct in6_addr
*)saddr
,
178 .daddr
= *(struct in6_addr
*)daddr
,
184 seq
= siphash(&combined
, offsetofend(typeof(combined
), dport
),
186 seq
+= ktime_get_real_ns();
187 seq
&= (1ull << 48) - 1;
190 EXPORT_SYMBOL(secure_dccpv6_sequence_number
);