Skip to content

Instantly share code, notes, and snippets.

@samcv

samcv/gist:e8ac9dd6c5636fe9c8e9c749224ceb89 Secret

Last active June 4, 2018 19:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save samcv/e8ac9dd6c5636fe9c8e9c749224ceb89 to your computer and use it in GitHub Desktop.
Save samcv/e8ac9dd6c5636fe9c8e9c749224ceb89 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.md

Hardening Perl 6's Hash Implementation Against Attack

Hashes have long been considered an essential feature for Perl, though when exploited, hashes can cause servers to grind to a halt.

I discuss my work on Perl 6's MoarVM to harden our hash implementation against DOS attacks. I explain how attacks on many insecure hashing functions operate and the importance of seeding hashing functions with a random seed. I also discuss the dangers of hash conflict resolution which does not take attacks into account. I explain the features and changes I have introduced and plan to introduce into MoarVM to make our hashing more robust to attacks and touch on how other languages have tried to solve these issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment