SYN cookies in both Linux and FreeBSD uses siphash.

* FreeBSD: https://svnweb.freebsd.org/base?view=revision&revision=253210 (since 
2013)
* Linux: 
https://github.com/torvalds/linux/commit/fe62d05b295bde037fa324767674540907c89362#diff-14feef60c3dbcf67539f089de04546c907233cbae09e1b2dd2c2bc6d6eae4416
 (since 2017)

I believe that the SYN cookies have exactly the same properties as DNS cookies.

Ondrej
--
Ondřej Surý (He/Him)
[email protected]

> On 2. 12. 2020, at 22:15, Eric Rescorla <[email protected]> wrote:
> 
> Well hash tables are an application with somewhat different security 
> properties than MACs, so I don't think this is dispositive.
> 

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to