lkml.org 
[lkml]   [1996]   [May]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
SubjectRe: CONFIG_RANDOM option for 1.99.2
Date
> actual_initial_sequence_counter =
> (MD5(local port, remote port, remote address,
> high_quality_randomness_obtained_before_networking_enabled) +
> kernel's_existing_sequence_counter);
>
> This satisfies all of the Host Requirements RFC's, and makes it
> significantly more difficult for crackers to perform hijack TCP
> connections initiating from the Linux box.

Is that true. You need monotonically increasing sequence space. We'd need to
make the MD5 part a small fragment of the sequence space (say 24bit) I
think ?

alan



\
 
 \ /
  Last update: 2005-03-22 13:37    [W:0.082 / U:6.364 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site