4 ms·
If you don’t require deterministic hashes (and deterministic hashes are bad for anonymization anyway) just hash data+randomBytes(16) (obviously, don't save rand
by slooonz 8y ago
If you don’t require deterministic hashes (and deterministic hashes are bad for anonymization anyway) just hash data+randomBytes(16) (obviously, don't save randomBytes(16) anywhere). There you are, nobody can bruteforce your hashes.
Even better, just replace your data with H(randomBytes(16)). Or a random UUID.
- draw_down 8y agoMan, that sounds a lot like "developers just doin' stuff". What's better, randomBytes(16) or H(randomBytes(16))? Or random UUID? Why hash the random bytes but not that? What are the entropy implications? Why attach an identifier to something that's supposed to be anonymous? etc etc
- EGreg 8y agoUmm what good is the string of random bytes if you don’t store it anywhere? The point of a one-way function is that its output is verifiable given the input.
- jiveturkey 8y agoeither your comment is nonsensical or you left a detail out. per your comment, you may as well not record the data at all.
- deleted 8y ago[deleted]