[Python-Dev] [issue13703] Hash collision security issue

Gregory P. Smith greg at krypto.org
Sun Jan 29 22:20:07 CET 2012


On Fri, Jan 27, 2012 at 11:39 AM,  <martin at v.loewis.de> wrote:
>
> In fact, none of the strategies fixes all issues with hash collisions;
> even the hash-randomization solutions only deal with string keys, and
> don't consider collisions on non-string keys.

The hash-randomization approach also works fine on immutable container
objects containing bytes and string keys such as tuples and UserString
that merely expose a combination of the hashes of all of their
contained elements.

-gps


More information about the Python-Dev mailing list