Messages in this thread | | | Subject | Re: [kernel-hardening] Re: HalfSipHash Acceptable Usage | From | Eric Dumazet <> | Date | Wed, 21 Dec 2016 09:08:21 -0800 |
| |
On Wed, 2016-12-21 at 11:39 -0500, Rik van Riel wrote:
> Does anybody still have a P4? > > If they do, they're probably better off replacing > it with an Atom. The reduced power bills will pay > for replacing that P4 within a year or two.
Well, maybe they have millions of units to replace.
> > In short, I am not sure how important the P4 > performance numbers are, especially if we can > improve security for everybody else...
Worth adding that the ISN or syncookie generation are less than 10% of the actual cost of handling a problematic (having to generate ISN or syncookie) TCP packet anyway.
So we are talking of minors potential impact for '2000-era' cpus.
Definitely I vote for using SipHash in TCP ASAP.
| |