secure_seq.c 4.1 KB
Newer Older
1 2 3 4
/*
 * Copyright (C) 2016 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
 */

5 6 7 8 9 10 11 12 13
#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/cryptohash.h>
#include <linux/module.h>
#include <linux/cache.h>
#include <linux/random.h>
#include <linux/hrtimer.h>
#include <linux/ktime.h>
#include <linux/string.h>
14
#include <linux/net.h>
15
#include <linux/siphash.h>
16 17
#include <net/secure_seq.h>

18
#if IS_ENABLED(CONFIG_IPV6) || IS_ENABLED(CONFIG_INET)
19
#include <linux/in6.h>
20
#include <net/tcp.h>
21

22
static siphash_key_t net_secret __read_mostly;
23

24
static __always_inline void net_secret_init(void)
25
{
26
	net_get_random_once(&net_secret, sizeof(net_secret));
27
}
28
#endif
29

30
#ifdef CONFIG_INET
31 32 33 34 35 36 37 38 39 40 41 42
static u32 seq_scale(u32 seq)
{
	/*
	 *	As close as possible to RFC 793, which
	 *	suggests using a 250 kHz clock.
	 *	Further reading shows this assumes 2 Mb/s networks.
	 *	For 10 Mb/s Ethernet, a 1 MHz clock is appropriate.
	 *	For 10 Gb/s Ethernet, a 1 GHz clock should be ok, but
	 *	we also need to limit the resolution so that the u32 seq
	 *	overlaps less than one time per MSL (2 minutes).
	 *	Choosing a clock of 64 ns period is OK. (period of 274 s)
	 */
43
	return seq + (ktime_get_real_ns() >> 6);
44
}
45
#endif
46

E
Eric Dumazet 已提交
47
#if IS_ENABLED(CONFIG_IPV6)
48 49
u32 secure_tcpv6_sequence_number(const __be32 *saddr, const __be32 *daddr,
				 __be16 sport, __be16 dport, u32 *tsoff)
50
{
51 52 53 54 55 56 57 58 59 60 61 62
	const struct {
		struct in6_addr saddr;
		struct in6_addr daddr;
		__be16 sport;
		__be16 dport;
	} __aligned(SIPHASH_ALIGNMENT) combined = {
		.saddr = *(struct in6_addr *)saddr,
		.daddr = *(struct in6_addr *)daddr,
		.sport = sport,
		.dport = dport
	};
	u64 hash;
63
	net_secret_init();
64 65 66 67
	hash = siphash(&combined, offsetofend(typeof(combined), dport),
		       &net_secret);
	*tsoff = sysctl_tcp_timestamps == 1 ? (hash >> 32) : 0;
	return seq_scale(hash);
68 69 70 71 72 73
}
EXPORT_SYMBOL(secure_tcpv6_sequence_number);

u32 secure_ipv6_port_ephemeral(const __be32 *saddr, const __be32 *daddr,
			       __be16 dport)
{
74 75 76 77 78 79 80 81 82
	const struct {
		struct in6_addr saddr;
		struct in6_addr daddr;
		__be16 dport;
	} __aligned(SIPHASH_ALIGNMENT) combined = {
		.saddr = *(struct in6_addr *)saddr,
		.daddr = *(struct in6_addr *)daddr,
		.dport = dport
	};
83
	net_secret_init();
84 85
	return siphash(&combined, offsetofend(typeof(combined), dport),
		       &net_secret);
86
}
87
EXPORT_SYMBOL(secure_ipv6_port_ephemeral);
88 89 90 91
#endif

#ifdef CONFIG_INET

92 93 94 95 96 97
/* secure_tcp_sequence_number(a, b, 0, d) == secure_ipv4_port_ephemeral(a, b, d),
 * but fortunately, `sport' cannot be 0 in any circumstances. If this changes,
 * it would be easy enough to have the former function use siphash_4u32, passing
 * the arguments as separate u32.
 */

98 99
u32 secure_tcp_sequence_number(__be32 saddr, __be32 daddr,
			       __be16 sport, __be16 dport, u32 *tsoff)
100
{
101
	u64 hash;
102
	net_secret_init();
103 104 105 106 107
	hash = siphash_3u32((__force u32)saddr, (__force u32)daddr,
			    (__force u32)sport << 16 | (__force u32)dport,
			    &net_secret);
	*tsoff = sysctl_tcp_timestamps == 1 ? (hash >> 32) : 0;
	return seq_scale(hash);
108 109 110 111
}

u32 secure_ipv4_port_ephemeral(__be32 saddr, __be32 daddr, __be16 dport)
{
112
	net_secret_init();
113 114
	return siphash_3u32((__force u32)saddr, (__force u32)daddr,
			    (__force u16)dport, &net_secret);
115 116 117 118
}
EXPORT_SYMBOL_GPL(secure_ipv4_port_ephemeral);
#endif

I
Igor Maravić 已提交
119
#if IS_ENABLED(CONFIG_IP_DCCP)
120 121 122 123
u64 secure_dccp_sequence_number(__be32 saddr, __be32 daddr,
				__be16 sport, __be16 dport)
{
	u64 seq;
124
	net_secret_init();
125
	seq = siphash_3u32(saddr, daddr, (u32)sport << 16 | dport, &net_secret);
126
	seq += ktime_get_real_ns();
127 128 129 130 131
	seq &= (1ull << 48) - 1;
	return seq;
}
EXPORT_SYMBOL(secure_dccp_sequence_number);

E
Eric Dumazet 已提交
132
#if IS_ENABLED(CONFIG_IPV6)
133 134 135
u64 secure_dccpv6_sequence_number(__be32 *saddr, __be32 *daddr,
				  __be16 sport, __be16 dport)
{
136 137 138 139 140 141 142 143 144 145 146
	const struct {
		struct in6_addr saddr;
		struct in6_addr daddr;
		__be16 sport;
		__be16 dport;
	} __aligned(SIPHASH_ALIGNMENT) combined = {
		.saddr = *(struct in6_addr *)saddr,
		.daddr = *(struct in6_addr *)daddr,
		.sport = sport,
		.dport = dport
	};
147
	u64 seq;
148
	net_secret_init();
149 150
	seq = siphash(&combined, offsetofend(typeof(combined), dport),
		      &net_secret);
151
	seq += ktime_get_real_ns();
152 153 154 155 156 157
	seq &= (1ull << 48) - 1;
	return seq;
}
EXPORT_SYMBOL(secure_dccpv6_sequence_number);
#endif
#endif