Alexander Bluhm wrote: > CVSROOT: /cvs > Module name: src > Changes by: [email protected] 2015/09/10 07:36:44 > > Modified files: > sys/netinet : tcp_input.c > > Log message: > Only half of the IPv6 source address was used as input for the syn > cache hash. That makes it trivial to create syn cache collisions. > Take the full address, xor it with random data and put it into the > hash function. > OK markus@
hmmm, why not use siphash here?
