]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MEDIUM: quic: use ha_random64_pair_hashed() to generate the QUIC retry tokens
authorWilly Tarreau <w@1wt.eu>
Mon, 25 May 2026 16:31:02 +0000 (18:31 +0200)
committerWilly Tarreau <w@1wt.eu>
Tue, 26 May 2026 11:13:24 +0000 (13:13 +0200)
commit73b5f0eed4e8e881dad4b035f1385f89492c4c25
treeecb4a9c5978b95c7452f44ec3b4b4cda564c4e08
parent7ac4d7d69f3abbbbbbd43efe8cc68962aae3252e
MEDIUM: quic: use ha_random64_pair_hashed() to generate the QUIC retry tokens

The QUIC retry tokens used to directly return ha_random64(), making the
next tokens easily predictable on low-load systems before the XXH64 call.
Let's now switch to the faster and safer ha_random64_pair_hashed() instead.
src/quic_token.c