[Python-Dev] Hash collision security issue (now public)

Serhiy Storchaka storchaka at gmail.com
Fri Jan 6 07:41:17 CET 2012


06.01.12 02:10, Nick Coghlan написав(ла):
> Not a good idea - a lot of the 3rd party tests that depend on dict
> ordering are going to be using those modules anyway, so scattering our
> solution across half the standard library is needlessly creating
> additional work without really reducing the incompatibility problem.
> If we're going to change anything, it may as well be the string
> hashing algorithm itself.

Changing the string hashing algorithm will hit the general performance 
and also will break down any code that depend on dict ordering. 
Specialized dict slow down only needed parts of some applications.



More information about the Python-Dev mailing list