Blog post on hardening Perl's hash function

[demerphq]

Hi all. Long ago I promised an explanation of why Perl hash function was changed in 5.18.

You can read up on it here

Sorry it took so long, many vendors did not patch for a long time.

[talexb]

A really fascinating read -- thanks for that.

Typo note: Near the beginning you have the word 'publicity' where I think you want 'publicly'.

[Jenda]

Here's a Windows version of the test (the quotes need to be changed from the Unix version):

perl -le "@h{qw(a h k r ad ao as ax ay bs ck cm cz ej fz hm ia ih is i
+z jk kx lg lv lw nj oj pr ql rk sk td tz vy yc yw zj zu aad acp acq a
+dm ajy alu apb apx asa asm atf axi ayl bbq bcs bdp bhs bml)} =(); pri
+nt %h=~/128/ && 'not ',qq{ ok # perl $]}"

[Discipulus]

oh! one of my oldest Perl installation is NOT good!

Where theese patch can be downloaded?