[Python-Dev] Hash collision security issue (now public) (original) (raw)

Fred Drake fdrake at acm.org
Thu Dec 29 14:30:55 CET 2011


On Thu, Dec 29, 2011 at 8:19 AM, Christian Heimes <lists at cheimes.de> wrote:

Persistence layers like ZODB and cross interpreter communication channels used by multiprocessing may (!) rely on the fact that the hash of a string is fixed.

ZODB does not rely on a fixed hash function for strings; for any application to rely on a stable hash would cause problems when updating Python versions.

-Fred

-- Fred L. Drake, Jr.    "A person who won't read has no advantage over one who can't read."    --Samuel Langhorne Clemens



More information about the Python-Dev mailing list