Welcome to Digest:SHA is broken

Digest:SHA is broken

By Mark Overmeer (‎markov‎) from Arnhem.pm, Amsterdam.pm
Date: Sunday, 24 August 2014 13:20
Duration: 20 minutes
Target audience: Any
Language: English

You can find more information on the speaker's site:


Last year, Digest::SHA changed its interface from accepting bytes into using strings. Perl people are thát focused on supporting unicode strings, that they forget that some operations work on bits and bytes --not strings...

Eventhough Perl has no way to differentiate between strings and bytes in an internal SV,
that does not mean that programs sometimes really care. SHA computations are very sensitive for the smallest bit change, so there should not be any dwimming, no tricks!


Attended by: Patrick Ringl (‎pari‎), Diego Kuperman (‎diegok‎), Jose Luis Martinez Torres (‎JLMARTIN‎), Radek Kotowicz, Jan Seidl (‎JaSei‎), Marco Pessotto (‎melmothx‎), Anton Berezin (‎Grrrr‎), Lukas Mai (‎mauke‎), Konstantin Stoyanov (‎kosyo‎), Ivan Ivanov (‎suricactus‎), Radoslav Takev (‎radan‎), Jussi Kinnula (‎Spot‎), Bradley Andersen (‎elohmrow‎), Andrew Nugged (nugged), Søren Lund (‎slu‎), David Leadbeater (‎dg‎), Ahti Nurminen (‎ade‎), Dan Muey, Elizabeth Mattijsen (‎liz‎), Nikolaos-Digenis Karagiannis (‎Digenis‎), Simun Kodzoman (‎sime‎), Alex-P. Natsios (‎Drakevr‎),