[issue13703] Hash collision security issue

Antoine Pitrou report at bugs.python.org
Wed Jan 18 22:05:30 CET 2012


Antoine Pitrou <pitrou at free.fr> added the comment:

> I like this, esp. if for old releases the collision counting is on by
> default and the hash seeding is off by default, while in 3.3 both should be
> on by default. Different env vars or flags should be used to enable/disable
> them.

I would hope 3.3 only gets randomized hashing. Collision counting is a
hack to make bugfix releases 99.999%-compatible instead of 99.9% ;)

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue13703>
_______________________________________


More information about the Python-bugs-list mailing list