luc14n0/glib
1
0
Fork 0
mirror of https://gitlab.gnome.org/GNOME/glib.git synced 2025-02-10 12:55:48 +01:00
Code Issues Packages Projects Releases Wiki Activity

GHash: add note about randomness in hashing

Browse Source 
To clarify our statements about being robust against outside attackers
degrading the performance of your hashtable.
This commit is contained in:
Ryan Lortie 2012-01-25 10:09:09 -05:00
parent 5286dbb7e1
commit 12060df9f1
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
glib/ghash.c
View File

@ -165,6 +165,11 @@
* Using g_str_hash() in that situation might make your application * Using g_str_hash() in that situation might make your application
* vulerable to <ulink url="https://lwn.net/Articles/474912/">Algorithmic Complexity Attacks</ulink>. * vulerable to <ulink url="https://lwn.net/Articles/474912/">Algorithmic Complexity Attacks</ulink>.
* *
* The key to choosing a good hash is unpredictability. Even
* cryptographic hashes are very easy to find collisions for when the
* remainder is taken modulo a somewhat predictable prime number. There
* must be an element of randomness that an attacker is unable to guess.
*
* Returns: the hash value corresponding to the key * Returns: the hash value corresponding to the key
*/ */