1 // SPDX-License-Identifier: GPL-2.0-only
3 * Copyright (C) 2016 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
6 #include <linux/kernel.h>
7 #include <linux/init.h>
8 #include <linux/module.h>
9 #include <linux/cache.h>
10 #include <linux/random.h>
11 #include <linux/hrtimer.h>
12 #include <linux/ktime.h>
13 #include <linux/string.h>
14 #include <linux/net.h>
15 #include <linux/siphash.h>
16 #include <net/secure_seq.h>
18 #if IS_ENABLED(CONFIG_IPV6) || IS_ENABLED(CONFIG_INET)
19 #include <linux/in6.h>
22 static siphash_key_t net_secret __read_mostly
;
23 static siphash_key_t ts_secret __read_mostly
;
25 static __always_inline
void net_secret_init(void)
27 net_get_random_once(&net_secret
, sizeof(net_secret
));
30 static __always_inline
void ts_secret_init(void)
32 net_get_random_once(&ts_secret
, sizeof(ts_secret
));
37 static u32
seq_scale(u32 seq
)
40 * As close as possible to RFC 793, which
41 * suggests using a 250 kHz clock.
42 * Further reading shows this assumes 2 Mb/s networks.
43 * For 10 Mb/s Ethernet, a 1 MHz clock is appropriate.
44 * For 10 Gb/s Ethernet, a 1 GHz clock should be ok, but
45 * we also need to limit the resolution so that the u32 seq
46 * overlaps less than one time per MSL (2 minutes).
47 * Choosing a clock of 64 ns period is OK. (period of 274 s)
49 return seq
+ (ktime_get_real_ns() >> 6);
53 #if IS_ENABLED(CONFIG_IPV6)
54 u32
secure_tcpv6_ts_off(const struct net
*net
,
55 const __be32
*saddr
, const __be32
*daddr
)
58 struct in6_addr saddr
;
59 struct in6_addr daddr
;
60 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
61 .saddr
= *(struct in6_addr
*)saddr
,
62 .daddr
= *(struct in6_addr
*)daddr
,
65 if (net
->ipv4
.sysctl_tcp_timestamps
!= 1)
69 return siphash(&combined
, offsetofend(typeof(combined
), daddr
),
72 EXPORT_SYMBOL(secure_tcpv6_ts_off
);
74 u32
secure_tcpv6_seq(const __be32
*saddr
, const __be32
*daddr
,
75 __be16 sport
, __be16 dport
)
78 struct in6_addr saddr
;
79 struct in6_addr daddr
;
82 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
83 .saddr
= *(struct in6_addr
*)saddr
,
84 .daddr
= *(struct in6_addr
*)daddr
,
91 hash
= siphash(&combined
, offsetofend(typeof(combined
), dport
),
93 return seq_scale(hash
);
95 EXPORT_SYMBOL(secure_tcpv6_seq
);
97 u32
secure_ipv6_port_ephemeral(const __be32
*saddr
, const __be32
*daddr
,
101 struct in6_addr saddr
;
102 struct in6_addr daddr
;
104 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
105 .saddr
= *(struct in6_addr
*)saddr
,
106 .daddr
= *(struct in6_addr
*)daddr
,
110 return siphash(&combined
, offsetofend(typeof(combined
), dport
),
113 EXPORT_SYMBOL(secure_ipv6_port_ephemeral
);
117 u32
secure_tcp_ts_off(const struct net
*net
, __be32 saddr
, __be32 daddr
)
119 if (net
->ipv4
.sysctl_tcp_timestamps
!= 1)
123 return siphash_2u32((__force u32
)saddr
, (__force u32
)daddr
,
127 /* secure_tcp_seq_and_tsoff(a, b, 0, d) == secure_ipv4_port_ephemeral(a, b, d),
128 * but fortunately, `sport' cannot be 0 in any circumstances. If this changes,
129 * it would be easy enough to have the former function use siphash_4u32, passing
130 * the arguments as separate u32.
132 u32
secure_tcp_seq(__be32 saddr
, __be32 daddr
,
133 __be16 sport
, __be16 dport
)
138 hash
= siphash_3u32((__force u32
)saddr
, (__force u32
)daddr
,
139 (__force u32
)sport
<< 16 | (__force u32
)dport
,
141 return seq_scale(hash
);
143 EXPORT_SYMBOL_GPL(secure_tcp_seq
);
145 u32
secure_ipv4_port_ephemeral(__be32 saddr
, __be32 daddr
, __be16 dport
)
148 return siphash_3u32((__force u32
)saddr
, (__force u32
)daddr
,
149 (__force u16
)dport
, &net_secret
);
151 EXPORT_SYMBOL_GPL(secure_ipv4_port_ephemeral
);
154 #if IS_ENABLED(CONFIG_IP_DCCP)
155 u64
secure_dccp_sequence_number(__be32 saddr
, __be32 daddr
,
156 __be16 sport
, __be16 dport
)
160 seq
= siphash_3u32((__force u32
)saddr
, (__force u32
)daddr
,
161 (__force u32
)sport
<< 16 | (__force u32
)dport
,
163 seq
+= ktime_get_real_ns();
164 seq
&= (1ull << 48) - 1;
167 EXPORT_SYMBOL(secure_dccp_sequence_number
);
169 #if IS_ENABLED(CONFIG_IPV6)
170 u64
secure_dccpv6_sequence_number(__be32
*saddr
, __be32
*daddr
,
171 __be16 sport
, __be16 dport
)
174 struct in6_addr saddr
;
175 struct in6_addr daddr
;
178 } __aligned(SIPHASH_ALIGNMENT
) combined
= {
179 .saddr
= *(struct in6_addr
*)saddr
,
180 .daddr
= *(struct in6_addr
*)daddr
,
186 seq
= siphash(&combined
, offsetofend(typeof(combined
), dport
),
188 seq
+= ktime_get_real_ns();
189 seq
&= (1ull << 48) - 1;
192 EXPORT_SYMBOL(secure_dccpv6_sequence_number
);