]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Replace SHA256 with SIPHASH24 in HMAC cookie approach master
authorArne Schwabe <arne@rfc2549.org>
Thu, 13 Aug 2026 17:02:05 +0000 (19:02 +0200)
committerGert Doering <gert@greenie.muc.de>
Thu, 13 Aug 2026 17:10:17 +0000 (19:10 +0200)
commitffa0e712eadab73b7e7b94de637d88c539cf6bc6
tree4b9e7d6446100509218ec1dcfe742cf11f98123c
parentac70ce4ad161b3840edbb4e9d89fb979b06d6562
Replace SHA256 with SIPHASH24 in HMAC cookie approach

Using SHA256 for this is overkill since we only need a 64bit hash
value that is not predictable. Siphash24 also fulfils these
requirements while being much faster.

Change-Id: I3b6bb178ffb2bb49981bc23eabf04fe8e06d6fc3
Signed-off-by: Arne Schwabe <arne-openvpn@rfc2549.org>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1827
Message-Id: <20260813170211.29576-1-gert@greenie.muc.de>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg38316.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
CMakeLists.txt
src/openvpn/init.c
src/openvpn/mudp.c
src/openvpn/openvpn.h
src/openvpn/siphash.h
src/openvpn/ssl_pkt.c
src/openvpn/ssl_pkt.h
tests/unit_tests/openvpn/Makefile.am
tests/unit_tests/openvpn/test_pkt.c