lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


On Thu, Mar 22, 2012 at 16:44, Roberto Ierusalimschy <roberto@inf.puc-rio.br> wrote:
> So, can makes long string just using a few of bytes to calculate hash
> value? using a random seed to choose how to skip bytes? this will be
> better.

Yes, that may be a good idea. But note that the proposal has two
different things (that maybe we should have tried separately).

Doing that might not be a good idea from a security perspective.  If the random seed were just used to chose the 'hop' between characters in the hash then it wouldn't take much to run through all possible 'hops' and DoS the hash.  The only way to do that would be to hop randomly from character to character based on the seed.

John.