3 ms·
> To defend against that one needs to add some per-hashtable randomized state into the hash IV. You should almost always be doing this anyways, since most hash
by 10000truths 4y ago
> To defend against that one needs to add some per-hashtable randomized state into the hash IV.
You should almost always be doing this anyways, since most hash tables use user-provided data as keys, which opens up a well known avenue for denial-of-service attacks:
https://lwn.net/Articles/474912/ https://lwn.net/Articles/474912/
- anarazel 4y agoI think that's often fixed using a per run random seed, rather than a per table seed. The patch linked in the python bug linked from that article does seem to do that, for example.