Re: [tipc-discussion] [PATCH net-next] net: tipc: Supply missing udp_media.h include file

2020-09-18 Thread David Miller
From: Wang Hai Date: Fri, 18 Sep 2020 21:18:19 +0800 > If the header file containing a function's prototype isn't included by > the sourcefile containing the associated function, the build system > complains of missing prototypes. > > Fixes the following W=1 kernel build warning(s): > >

Re: [tipc-discussion] [PATCH net-next] tipc: Remove unused macro CF_SERVER

2020-09-18 Thread David Miller
From: YueHaibing Date: Fri, 18 Sep 2020 21:16:15 +0800 > It is no used any more, so can remove it. > > Signed-off-by: YueHaibing Applied. ___ tipc-discussion mailing list tipc-discussion@lists.sourceforge.net

Re: [tipc-discussion] [net-next v3 0/4] tipc: add more features to TIPC encryption

2020-09-18 Thread David Miller
From: Tuong Lien Date: Fri, 18 Sep 2020 08:17:25 +0700 > This series adds some new features to TIPC encryption: > > - Patch 1 ("tipc: optimize key switching time and logic") optimizes the > code and logic in preparation for the following commits. > > - Patch 2 ("tipc: introduce encryption

[tipc-discussion] [net-next v3 2/4] tipc: introduce encryption master key

2020-09-18 Thread Tuong Lien
In addition to the supported cluster & per-node encryption keys for the en/decryption of TIPC messages, we now introduce one option for user to set a cluster key as 'master key', which is simply a symmetric key like the former but has a longer life cycle. It has two purposes: - Authentication of

[tipc-discussion] [net-next v3 1/4] tipc: optimize key switching time and logic

2020-09-18 Thread Tuong Lien
We reduce the lasting time for a pending TX key to be active as well as for a passive RX key to be freed which generally helps speed up the key switching. It is not expected to be too fast but should not be too slow either. Also the key handling logic is simplified that a pending RX key will be

[tipc-discussion] [net-next v3 4/4] tipc: add automatic rekeying for encryption key

2020-09-18 Thread Tuong Lien
Rekeying is required for security since a key is less secure when using for a long time. Also, key will be detached when its nonce value (or seqno ...) is exhausted. We now make the rekeying process automatic and configurable by user. Basically, TIPC will at a specific interval generate a new key

[tipc-discussion] [net-next v3 3/4] tipc: add automatic session key exchange

2020-09-18 Thread Tuong Lien
With support from the master key option in the previous commit, it becomes easy to make frequent updates/exchanges of session keys between authenticated cluster nodes. Basically, there are two situations where the key exchange will take in place: - When a new node joins the cluster (with the

[tipc-discussion] [net-next v3 0/4] tipc: add more features to TIPC encryption

2020-09-18 Thread Tuong Lien
This series adds some new features to TIPC encryption: - Patch 1 ("tipc: optimize key switching time and logic") optimizes the code and logic in preparation for the following commits. - Patch 2 ("tipc: introduce encryption master key") introduces support of 'master key' for authentication of new