Hardening Perl 6's Hash Implementation Against Attack

Hardening Perl 6's Hash Implementation Against Attack

By Samantha McVey (‎samcv‎) from amsterdam.pm
Date: Saturday, 7 July 2018 11:30
Duration: 45 minutes
Target audience: Any
Language: English
Tags: hash perl6 security

Hashes have long been considered an essential feature for Perl, though when exploited, hashes can cause servers to grind to a halt.

I discuss my work on Perl 6's MoarVM to harden our hash implementation against DOS attacks. I explain how attacks on many insecure hashing functions operate and the importance of seeding hashing functions with a random seed. I also discuss the dangers of hash conflict resolution which does not take attacks into account. I explain the features and changes I have introduced and plan to introduce into
MoarVM to make our hashing more robust to attacks and touch on how other languages have tried to solve these issues.