[Python-Dev] Hash collision security issue (now public)

Fred Drake fdrake at acm.org
Thu Dec 29 14:30:55 CET 2011


On Thu, Dec 29, 2011 at 8:19 AM, Christian Heimes <lists at cheimes.de> wrote:
> Persistence layers like ZODB and cross interpreter communication
> channels used by multiprocessing may (!) rely on the fact that the hash
> of a string is fixed.

ZODB does not rely on a fixed hash function for strings; for any application
to rely on a stable hash would cause problems when updating Python versions.


  -Fred

-- 
Fred L. Drake, Jr.    <fdrake at acm.org>
"A person who won't read has no advantage over one who can't read."
   --Samuel Langhorne Clemens


More information about the Python-Dev mailing list