4 ms·
> I.e. the usage of SipHash for their hash table in Python 3.4, ruby, rust, systemd, OpenDNS, Haskell and OpenBSD is pure security theatre. This seems like a n
by kzrdude 7y ago
> I.e. the usage of SipHash for their hash table in Python 3.4, ruby, rust, systemd, OpenDNS, Haskell and OpenBSD is pure security theatre.
This seems like a noteworthy claim, and the hflounge link is unfortunately broken!
Is it possible to you to provide more information about this, that Siphash would be essentially broken?
- rurban 7y agoI never said that Siphash is broken, read what I said. It's not broken, it's just theatre,and way too slow to be useful for anything. And it doesn't protect against hash table attacks. Proper protections need to be done at the collision handling step, not in the hash function. http://perl11.org/blog/seed.html http://perl11.org/blog/seed.html https://news.ycombinator.com/item?id=13361860 https://news.ycombinator.com/item?id=13361860