Hacker News new | ask | show | jobs
by d110af5ccf 1792 days ago
Without intending to endorse the wording, I suspect what's being communicated might be something related to the difficulty for an attacker to derail your system by cheaply predicting hashes. IIRC, the standard Java runtime HashMap implementation was susceptible to this at one point - an attacker could easily and cheaply force all values into only a few buckets.

The idea being, you might not care about actual cryptographic security but instead only the feasibility of some sort of cheap online collision attack.

2 comments

Right, that's what SipHash tries to do too (SipHash was designed by two very reputable cryptographers).
In layman's terms, sounds like it's something which is difficult to guess but not necessarily difficult to crack?