RetroSearch Browse

Thu Dec 29 23:28:22 CET 2011 · https://mail.python.org/pipermail/python-dev/2011-December/115149.html

On 12/29/2011 4:31 PM, Christian Heimes wrote:

> The hash randomization idea adds a salt to throw the attacker of course.
> Instead of
>
>    position = hash&  mask
>
> it's now
>
>    hash = salt + hash

As I understood the talk (actually, the bit of Perl interpreter C code 
shown), the randomization is to change hash(s) to hash(salt+s) so that 
the salt is completely mixed into the hash from the beginning, rather 
than just tacked on at the end.

-- 
Terry Jan Reedy

Home - News ( United States | United Kingdom | Italy | Germany ) - Football scores

Showing content from https://mail.python.org/pipermail/python-dev/2011-December/115149.html below:

[Python-Dev] Hash collision security issue (now public)