NetBSD Problem Report #56588

From www@netbsd.org  Tue Dec 28 23:26:51 2021
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id 498121A9239
	for <gnats-bugs@gnats.NetBSD.org>; Tue, 28 Dec 2021 23:26:51 +0000 (UTC)
Message-Id: <20211228232650.4F6361A923C@mollari.NetBSD.org>
Date: Tue, 28 Dec 2021 23:26:50 +0000 (UTC)
From: andrew.cagney@gmail.com
Reply-To: andrew.cagney@gmail.com
To: gnats-bugs@NetBSD.org
Subject: ESP's extended sequence number support
X-Send-Pr-Version: www-1.0

>Number:         56588
>Category:       kern
>Synopsis:       ESP's extended sequence number support
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 28 23:30:00 +0000 2021
>Last-Modified:  Tue Jan 16 21:45:01 +0000 2024
>Originator:     Andrew Cagney
>Release:        mainline
>Organization:
>Environment:
NetBSD netbsdw 9.2 NetBSD 9.2 (GENERIC) #0: Wed May 12 13:15:55 UTC 2021  mkrepro@mkrepro.NetBSD.org:/usr/src/sys/arch/i386/compile/GENERIC i386

>Description:
It looks like ESP/AH's extended sequence numbers, per:
 https://www.rfc-editor.org/rfc/rfc4303#section-2.2.1
isn't supported; looking at the kernel esp/ah headers they are hard wired to 32-bits.
>How-To-Repeat:

>Fix:

>Audit-Trail:
From: Andrew Cagney <andrew.cagney@gmail.com>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: kern/56588: ESP's extended sequence number support
Date: Tue, 16 Jan 2024 16:43:39 -0500

 One note, extended sequence numbers should not require a reply window.
 Hardware can burn through 2^32 sequence numbers in minutes and trying
 to hold anything approaching a meaningful number of replay bits is
 becoming unfeasible.

Home	PR Database Search