Hardening Perl 6's Hash Implementation Against Attack

Hardening Perl 6's Hash Implementation Against Attack

Door Samantha McVey (‎samcv‎) van amsterdam.pm
Datum: zaterdag 7 juli 2018 11:30
Duur: 45 minuten
Doelgroep: Iedereen
Taal: English
Tags: hash perl6 security

Hashes have long been considered an essential feature for Perl, though when exploited, hashes can cause servers to grind to a halt.

I discuss my work on Perl 6's MoarVM to harden our hash implementation against DOS attacks. I explain how attacks on many insecure hashing functions operate and the importance of seeding hashing functions with a random seed. I also discuss the dangers of hash conflict resolution which does not take attacks into account. I explain the features and changes I have introduced and plan to introduce into
MoarVM to make our hashing more robust to attacks and touch on how other languages have tried to solve these issues.