On Mon, 5 Oct 2026 15:25:19 -0500 Manish Kurup <[email protected]> wrote:
> + > + /* Random per-table seed so the CRC hash cannot be predicted offline > + * from attacker-controlled flow match fields. > + */ > + hash_tbl->hash_seed = (uint32_t)rte_rand(); > + No, the current rte_rand() is poor choice for anything hackers would want to know. Need to use getentropy here. There is a patch series to make rte_rand() better but if you are trying to prevent DoS then need to use something stronger.
