[Python-Dev] [issue13703] Hash collision security issue (original) (raw)

Gregory P. Smith greg at krypto.org
Sun Jan 29 22:20:07 CET 2012


On Fri, Jan 27, 2012 at 11:39 AM, <martin at v.loewis.de> wrote:

In fact, none of the strategies fixes all issues with hash collisions; even the hash-randomization solutions only deal with string keys, and don't consider collisions on non-string keys.

The hash-randomization approach also works fine on immutable container objects containing bytes and string keys such as tuples and UserString that merely expose a combination of the hashes of all of their contained elements.

-gps



More information about the Python-Dev mailing list