Menu

#13 Randomize the hash function seed

open
nobody
5
2006-02-22
2006-02-22
tromer
No

librsync currently uses a deterministic hash function,
which causes security problems in malicious settings.
This has been analyzed extensively in the mailing list.

Please consider randomizing the seed (or equivalently
and more portably, adding a random zero-th block). This
will require a stream format change to accomodate
transmission of the random seed.

Discussion


Log in to post a comment.