linux-kernel - Re: Unicode conversion issue

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <CAHk-=wi2-tEcS=iO+aVdb1QYxPdoPgA8K3sBXGaL5VH6qCvFaA@mail.gmail.com>
Date: Wed, 11 Dec 2024 14:09:54 -0800
From: Linus Torvalds <torvalds@...ux-foundation.org>
To: Jaegeuk Kim <jaegeuk@...nel.org>
Cc: Gabriel Krisman Bertazi <krisman@...e.de>, 
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>, "hanqi@...o.com" <hanqi@...o.com>, 
	"Theodore Ts'o" <tytso@....edu>
Subject: Re: Unicode conversion issue

On Wed, 11 Dec 2024 at 14:01, Jaegeuk Kim <jaegeuk@...nel.org> wrote:
> Ok, well understood. I'll work on how we can implement the linear search for
> case-folding. Meanwhile, yea, quite late so, may I ask for its revert?

Yes, I'll revert.

Also, given that there are case-folded hashes out there, I guess we're
stuck with them, and might as well use them for lookup.

But think of all the random path-based decisions that applications do,
and that ignorable characters basically invalidate - because people
can insert characters that "don't matter" and bypass all those checks.

It's a security nightmare.

            Linus