ipv6 connection hash function wanted ...

Joerg Sonnenberger joerg at britannica.bec.de
Wed Nov 15 14:35:38 UTC 2006


On Wed, Nov 15, 2006 at 01:53:12PM +0100, Max Laier wrote:
> AFAICT, the attached has this property, but I have no idea if it adds 
> sufficient entropy to the result - it looks like it, though.

You should do at least some bit shifting on the arguments as typical
ipv6 addresses are by default MAC based and larger shipments of the same
hardware often have similiar enough MACs to create collisions.

I think what Olliver meant was more to use an input of 128bit for crc32,
after xoring src, dst and secret.

Joerg


More information about the freebsd-hackers mailing list