[issue14621] Hash function is not randomized properly

[STINNER Victor]

STINNER Victor <victor.stinner at gmail.com> added the comment:

> One possible fix: ...
> Main loop looks like this: ..

Well, it was decided to not impact performances to workaround one specific class of attack, whereas there are many other ways to DoS Python. So we chose to keep the main loop unchanged. Randomizing the hash is not a fix for the hash DoS, it only makes the attacker harder.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14621>
_______________________________________