Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:79917 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 48857 invoked from network); 24 Dec 2014 09:47:26 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 24 Dec 2014 09:47:26 -0000 Authentication-Results: pb1.pair.com header.from=yohgaki@gmail.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=yohgaki@gmail.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.223.172 as permitted sender) X-PHP-List-Original-Sender: yohgaki@gmail.com X-Host-Fingerprint: 209.85.223.172 mail-ie0-f172.google.com Received: from [209.85.223.172] ([209.85.223.172:36173] helo=mail-ie0-f172.google.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id F7/D0-44085-DAB8A945 for ; Wed, 24 Dec 2014 04:47:25 -0500 Received: by mail-ie0-f172.google.com with SMTP id tr6so7378436ieb.31 for ; Wed, 24 Dec 2014 01:47:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=D0ECFgXMSAwE5QBRpjYnWIf6sDLooj+shsfmDAXnBmM=; b=IgLzdonBJfmWqt9EREQx2eFoGDMqcyp4Ozf+IrWPLef5LqF/g2c0wz2T2ikeerqPyu 6j5CwnmHeaAirkwkzVX0yW2dlMYTxYcLZXXqMj/zenlP53mHh+1bg3tE39RxeCDU5vSq PeXf+rf+hDEjo+BLROrcPqWf1WHyneDx0i06zFKpR5PPQEKLHJwKot3Zhj0nu7uzragM 5o7NsHpB+l/w+Kou9mfZvcb9nH6dQuMOhFXNTKvU1RJjAFtOdvH7aWKFWA4Pll+5BivE GXdRNrATXGbDo3W0TnD6yXN3qBCZHxDO7CKyl3UdJLbTrmrIL2SOkDOPen9quabcNuKo re9Q== X-Received: by 10.43.75.69 with SMTP id yz5mr25632325icb.90.1419414442009; Wed, 24 Dec 2014 01:47:22 -0800 (PST) MIME-Version: 1.0 Sender: yohgaki@gmail.com Received: by 10.107.164.217 with HTTP; Wed, 24 Dec 2014 01:46:41 -0800 (PST) In-Reply-To: References: <09B14273-C621-4AB9-9129-A149A9480A03@ajf.me> Date: Wed, 24 Dec 2014 18:46:41 +0900 X-Google-Sender-Auth: x0T2LJS40wHDwhqITR0dg_epPbw Message-ID: To: Pierre Joye Cc: Andrea Faulds , PHP internals , Scott Arciszewski Content-Type: multipart/alternative; boundary=001a11c39dc29b03d0050af32d6f Subject: Re: [PHP-DEV] JSON HASHDOS From: yohgaki@ohgaki.net (Yasuo Ohgaki) --001a11c39dc29b03d0050af32d6f Content-Type: text/plain; charset=UTF-8 Hi, On Wed, Dec 24, 2014 at 6:29 PM, Pierre Joye wrote: > I do not see how it solves the problem. It only reduces it, slightly. > Having a couple of medium instances generating crafted requests will > just have the same effect. So far the more realistic suggestions are > about having collision safe implementation, not implementation with > limited collisions. > It's ideal, but other languages are just switched to more secure hash and random seed. I'm not sure how feasible it would be. > > > P.S. Did we decide to have 64 bit array keys? 64 bit array key is much > more > > stronger against collisions. > > I would not say "much stronger", slightly stronger, but as long as the > same implementation is used, it does not really solve anything on this > area. > If we use the same DJB hash algo, it would not change situation much. I agree. Regards, -- Yasuo Ohgaki yohgaki@ohgaki.net --001a11c39dc29b03d0050af32d6f--