Re: RFC4941bis implementations

Florian Obser <florian@openbsd.org> Thu, 02 April 2020 20:11 UTC

Return-Path: <florian@openbsd.org>
X-Original-To: ipv6@ietfa.amsl.com
Delivered-To: ipv6@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ACC93A13F4 for <ipv6@ietfa.amsl.com>; Thu, 2 Apr 2020 13:11:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.611
X-Spam-Level:
X-Spam-Status: No, score=-1.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, KHOP_HELO_FCRDNS=0.276, SPF_HELO_NONE=0.001, T_SPF_PERMERROR=0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bGobZtS7RQFa for <ipv6@ietfa.amsl.com>; Thu, 2 Apr 2020 13:11:44 -0700 (PDT)
Received: from imap.narrans.de (michelangelo.narrans.de [IPv6:2001:19f0:6c01:821:5400:1ff:fe33:a36d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3EC323A13EF for <ipv6@ietf.org>; Thu, 2 Apr 2020 13:11:44 -0700 (PDT)
Received: from localhost (imap.narrans.de [local]) by imap.narrans.de (OpenSMTPD) with ESMTPA id 8b6336a8; Thu, 2 Apr 2020 22:11:40 +0200 (CEST)
Date: Thu, 02 Apr 2020 22:11:40 +0200
From: Florian Obser <florian@openbsd.org>
To: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Cc: ipv6@ietf.org
Subject: Re: RFC4941bis implementations
Message-ID: <20200402201140.4ohxhod3oa7fah3i@imap.narrans.de>
References: <7d65f86a-7a82-6139-b455-a27046496c52@si6networks.com> <af621915-ad9d-eb89-01d7-6ec7c5dfdd5e@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <af621915-ad9d-eb89-01d7-6ec7c5dfdd5e@gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/ipv6/GhecPJ59pln_f6xyg6Q3zyCZ6m8>
X-BeenThere: ipv6@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "IPv6 Maintenance Working Group \(6man\)" <ipv6.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ipv6>, <mailto:ipv6-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ipv6/>
List-Post: <mailto:ipv6@ietf.org>
List-Help: <mailto:ipv6-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ipv6>, <mailto:ipv6-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Apr 2020 20:11:46 -0000

On Thu, Apr 02, 2020 at 09:09:26PM +0200, Alexandre Petrescu wrote:
> Le 02/04/2020 à 19:26, Fernando Gont a écrit :
> > Folks,
> > 
> > FWIW, I produce a patch for Linux kernel (net-next) that implements
> > rfc4941bis:
> > https://www.gont.com.ar/code/fgont-patch-linux-net-next-rfc4941bis.txt
> > (up & running here).
> 
> Does it work with a plen 65 in RA?

I'm happy to report that slaacd(8) in OpenBSD does not care about the plen.
It just forms a 128 bit random number and overwrites the front with
the prefix.[1]
So if you put your whole /29 onlink you can have 99 bits of entropy!

Cheers,
Florian

> 
> Alex, LF/HF 1

1) https://github.com/openbsd/src/blob/master/sbin/slaacd/engine.c#L1415

-- 
I'm not entirely sure you are real.