Dmitry Safonov 1e03d32bea net/tcp: Add TCP-AO sign to outgoing packets ... Using precalculated traffic keys, sign TCP segments as prescribed by RFC5925. Per RFC, TCP header options are included in sign calculation: "The TCP header, by default including options, and where the TCP checksum and TCP-AO MAC fields are set to zero, all in network- byte order." (5.1.3) tcp_ao_hash_header() has exclude_options parameter to optionally exclude TCP header from hash calculation, as described in RFC5925 (9.1), this is needed for interaction with middleboxes that may change "some TCP options". This is wired up to AO key flags and setsockopt() later. Similarly to TCP-MD5 hash TCP segment fragments. From this moment a user can start sending TCP-AO signed segments with one of crypto ahash algorithms from supported by Linux kernel. It can have a user-specified MAC length, to either save TCP option header space or provide higher protection using a longer signature. The inbound segments are not yet verified, TCP-AO option is ignored and they are accepted. Co-developed-by: Francesco Ruggeri <fruggeri@arista.com> Signed-off-by: Francesco Ruggeri <fruggeri@arista.com> Co-developed-by: Salam Noureddine <noureddine@arista.com> Signed-off-by: Salam Noureddine <noureddine@arista.com> Signed-off-by: Dmitry Safonov <dima@arista.com> Acked-by: David Ahern <dsahern@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2023-10-27 10:35:44 +01:00
..
ila	ila: Remove unnecessary file net/ila.h	2023-08-02 12:28:16 -07:00
netfilter	netfilter: xt_mangle: only check verdict part of return value	2023-10-18 10:26:43 +02:00
addrconf_core.c	net: rename reference+tracking helpers	2022-06-09 21:52:55 -07:00
addrconf.c	net: ipv6/addrconf: clamp preferred_lft to the minimum required	2023-10-25 18:23:06 -07:00
addrlabel.c	ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network	2022-11-07 12:26:15 +00:00
af_inet6.c	bpf: Propagate modified uaddrlen from cgroup sockaddr programs	2023-10-11 15:03:40 -07:00
ah6.c	net: ipv6: Remove completion function scaffolding	2023-02-13 18:35:15 +08:00
anycast.c	IPv6: add extack info for IPv6 address add/delete	2023-07-28 11:01:56 +01:00
calipso.c	cipso,calipso: resolve a number of problems with the DOI refcounts	2021-03-04 15:26:57 -08:00
datagram.c	ipv6: lockless IPV6_FLOWINFO_SEND implementation	2023-09-15 10:33:48 +01:00
esp6_offload.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-06-22 18:40:38 -07:00
esp6.c	net: ipv6: fix typo in comments	2023-10-25 10:38:07 +01:00
exthdrs_core.c	ipv6: Fix out-of-bounds access in ipv6_find_tlv()	2023-05-24 08:43:39 +01:00
exthdrs_offload.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
exthdrs.c	ipv6: exthdrs: Replace opencoded swap() implementation	2023-08-08 15:36:47 -07:00
fib6_notifier.c	net: fib_notifier: propagate extack down to the notifier block callback	2019-10-04 11:10:56 -07:00
fib6_rules.c	ipv6: change fib6_rules_net_exit() to batch mode	2022-02-08 20:41:34 -08:00
fou6.c	net: Add MODULE_DESCRIPTION entries to network modules	2020-06-20 21:33:57 -07:00
icmp.c	ipv6: lockless IPV6_DONTFRAG implementation	2023-09-15 10:33:47 +01:00
inet6_connection_sock.c	net: implement lockless SO_PRIORITY	2023-10-01 19:09:54 +01:00
inet6_hashtables.c	net: remove duplicate INDIRECT_CALLABLE_DECLARE of udp[6]_ehashfn	2023-07-31 13:53:10 -07:00
ioam6_iptunnel.c	netlink: make range pointers in policies const	2023-10-26 16:24:09 -07:00
ioam6.c	genetlink: start to validate reserved header bytes	2022-08-29 12:47:15 +01:00
ip6_checksum.c	net: udp: fix handling of CHECKSUM_COMPLETE packets	2018-10-24 14:18:16 -07:00
ip6_fib.c	net/ipv6: Remove expired routes with a separated list of routes.	2023-08-16 12:26:43 +01:00
ip6_flowlabel.c	ipv6: move np->repflow to atomic flags	2023-09-15 10:33:48 +01:00
ip6_gre.c	net:ipv6: check return value of pskb_trim()	2023-07-19 12:25:58 +01:00
ip6_icmp.c	net: icmp: pass zeroed opts from icmp{,v6}_ndo_send before sending	2021-02-23 11:29:52 -08:00
ip6_input.c	ipv6: ignore dst hint for multipath routes	2023-09-01 08:11:51 +01:00
ip6_offload.c	net: move gso declarations and functions to their own files	2023-06-10 00:11:41 -07:00
ip6_offload.h	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
ip6_output.c	ipv6: avoid atomic fragment on GSO packets	2023-10-25 18:04:29 -07:00
ip6_tunnel.c	net: tunnels: annotate lockless accesses to dev->needed_headroom	2023-03-15 00:04:04 -07:00
ip6_udp_tunnel.c	ipv6: add new arguments to udp_tunnel6_dst_lookup()	2023-10-23 08:48:57 +01:00
ip6_vti.c	ip6_vti: fix slab-use-after-free in decode_session6	2023-07-11 11:06:08 +02:00
ip6mr.c	net: ipv4, ipv6: fix IPSTATS_MIB_OUTOCTETS increment duplicated	2023-08-30 09:44:09 +01:00
ipcomp6.c	xfrm: ipcomp: add extack to ipcomp{4,6}_init_state	2022-09-29 07:18:00 +02:00
ipv6_sockglue.c	ipv6: lockless IPV6_ADDR_PREFERENCES implementation	2023-09-19 18:21:44 +02:00
Kconfig	ipv6: fix indentation of a config attribute	2023-08-16 10:03:08 +01:00
Makefile	net/tcp: Introduce TCP_AO setsockopt()s	2023-10-27 10:35:44 +01:00
mcast_snoop.c	net: bridge: mcast: fix broken length + header check for MRDv6 Adv.	2021-04-27 14:02:06 -07:00
mcast.c	net: fix IPSTATS_MIB_OUTPKGS increment in OutForwDatagrams.	2023-10-20 12:01:00 +01:00
mip6.c	xfrm: mip6: add extack to mip6_destopt_init_state, mip6_rthdr_init_state	2022-09-29 07:18:01 +02:00
ndisc.c	net: fix IPSTATS_MIB_OUTPKGS increment in OutForwDatagrams.	2023-10-20 12:01:00 +01:00
netfilter.c	netfilter: Use l3mdev flow key when re-routing mangled packets	2022-05-16 13:03:29 +02:00
output_core.c	treewide: use get_random_u32_{above,below}() instead of manual loop	2022-11-18 02:15:22 +01:00
ping.c	bpf: Propagate modified uaddrlen from cgroup sockaddr programs	2023-10-11 15:03:40 -07:00
proc.c	net: fix IPSTATS_MIB_OUTPKGS increment in OutForwDatagrams.	2023-10-20 12:01:00 +01:00
protocol.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
raw.c	net: fix IPSTATS_MIB_OUTPKGS increment in OutForwDatagrams.	2023-10-20 12:01:00 +01:00
reassembly.c	networking: Update to register_net_sysctl_sz	2023-08-15 15:26:18 -07:00
route.c	ipv6: lockless IPV6_ADDR_PREFERENCES implementation	2023-09-19 18:21:44 +02:00
rpl_iptunnel.c	ipv6: rpl: Remove redundant skb_dst_drop().	2023-07-12 17:12:29 -07:00
rpl.c	ipv6: rpl: Remove pskb(_may)?_pull() in ipv6_rpl_srh_rcv().	2023-06-19 11:32:58 -07:00
seg6_hmac.c	net: ipv6: unexport __init-annotated seg6_hmac_net_init()	2022-06-28 21:23:30 -07:00
seg6_iptunnel.c	seg6: Cleanup duplicates of skb_dst_drop calls	2023-05-17 09:05:47 +01:00
seg6_local.c	seg6: add NEXT-C-SID support for SRv6 End.X behavior	2023-08-15 18:51:47 -07:00
seg6.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2022-09-08 18:38:30 +02:00
sit.c	sit: update dev->needed_headroom in ipip6_tunnel_bind_dev()	2023-04-28 09:48:14 +01:00
syncookies.c	tcp: Fix data-races around sysctl_tcp_syncookies.	2022-07-18 12:21:54 +01:00
sysctl_net_ipv6.c	networking: Update to register_net_sysctl_sz	2023-08-15 15:26:18 -07:00
tcp_ao.c	net/tcp: Add TCP-AO sign to outgoing packets	2023-10-27 10:35:44 +01:00
tcp_ipv6.c	net/tcp: Add TCP-AO sign to outgoing packets	2023-10-27 10:35:44 +01:00
tcpv6_offload.c	net: Make gro complete function to return void	2023-05-31 09:50:17 +01:00
tunnel6.c	tunnel6: add tunnel6_input_afinfo for ipip and ipv6 tunnels	2020-07-09 12:52:37 +02:00
udp_impl.h	tcp/udp: Call inet6_destroy_sock() in IPv6 sk->sk_destruct().	2022-10-12 17:50:37 -07:00
udp_offload.c	net: gro: fix misuse of CB in udp socket lookup	2023-07-29 17:10:27 +01:00
udp.c	bpf: Propagate modified uaddrlen from cgroup sockaddr programs	2023-10-11 15:03:40 -07:00
udplite.c	udplite: remove UDPLITE_BIT	2023-09-14 16:16:36 +02:00
xfrm6_input.c	udp: annotate data-races around udp->encap_type	2023-09-14 16:16:36 +02:00
xfrm6_output.c	ipv6: drop feature RTAX_FEATURE_ALLFRAG	2023-10-25 18:04:29 -07:00
xfrm6_policy.c	ipsec-2023-10-17	2023-10-17 18:21:13 -07:00
xfrm6_protocol.c	xfrm: add support for UDPv6 encapsulation of ESP	2020-04-28 11:28:36 +02:00
xfrm6_state.c	xfrm: remove output_finish indirection from xfrm_state_afinfo	2020-05-06 09:40:08 +02:00
xfrm6_tunnel.c	xfrm: tunnel: add extack to ipip_init_state, xfrm6_tunnel_init_state	2022-09-29 07:18:00 +02:00