Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:58994
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.220.170 as permitted sender)
References: <CAJWj5+HwwLCzc2QXkYgTba+6CT5Liae3ZG2TrCThqx+C6mkS8A@mail.gmail.com>
 <CAJWj5+HPtUTnmqC83AasB8SqaPBBY98sEivBjDrwkaMMfjzuZA@mail.gmail.com>
 <4F65267D.3040005@googlemail.com> <4F652868.7070901@sugarcrm.com> <CAHMUw2H3MrN_1kgqyL++FYp-F8y2W1GGNsgBqrNMzfvL4E15gg@mail.gmail.com>
In-Reply-To: <CAHMUw2H3MrN_1kgqyL++FYp-F8y2W1GGNsgBqrNMzfvL4E15gg@mail.gmail.com>
Mime-Version: 1.0 (1.0)
Date: Sun, 18 Mar 2012 14:32:43 +0800
Message-ID: <4619201592745010989@unknownmsgid>
To: Tjerk Anne Meesters <datibbaw@php.net>
Cc: Stas Malyshev <smalyshev@sugarcrm.com>, Sam <sam.e.giles@gmail.com>, 
	"internals@lists.php.net" <internals@lists.php.net>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Subject: Re: [PHP-DEV] Randomize hash-function in php
From: laruence@gmail.com (Xinchen Hui)

Sent from my iPhone

=E5=9C=A8 2012-3-18=EF=BC=8C13:57=EF=BC=8CTjerk Anne Meesters <datibbaw@php=
.net> =E5=86=99=E9=81=93=EF=BC=9A

> On Sun, Mar 18, 2012 at 8:12 AM, Stas Malyshev <smalyshev@sugarcrm.com> w=
rote:
>> Obvious solution would be to use a salt for the hash, which prevents bli=
nd
>> pre-computing of hash collisions. However, due to the fact that PHP hash
>> values can be reused in different processes by bytecode caches, implemen=
ting
>> it properly is not trivial.
>
> What if php uses salts for specific hashes only, such as GPC (or all
> hashes whose lifetime is limited to the current reuqest), and use a
> zero-value salt for all others?
definitely no=EF=BC=8Cthinking of pre-calculated hash. Or Ajax which use
json_decode parse input json.

IMO, this Make no sense but mess things up.

Thanks
>
> --
> PHP Internals - PHP Runtime Development Mailing List
> To unsubscribe, visit: http://www.php.net/unsub.php
>