On Mon, Jul 26, 2010 at 10:08:18AM -0400, Binger David wrote: > What if hash lookup failures do no return until they have completed > a randomized time-obscuring operation? That makes the attack more difficult (more attempts needed) but doesn't prevent it. Neil