3 ms·
Tokenized? One-way digest: SHA-512 the card number, iterate SHA-512 on the results 100 times, store that as your tracking code.
by delinka 8y ago
Tokenized? One-way digest: SHA-512 the card number, iterate SHA-512 on the results 100 times, store that as your tracking code.
- beokop 8y agoNo. With 10^12 possible account numbers and a hash rate of ~10^10 H/s using off the shelf hardware [1] it would only take 100*(10^12/10^10) = 10000 seconds to deanonymise the token. [1] https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a270c40 https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27...
- anamexis 8y agoWith 10^12 possible account numbers, it should be relatively easy to build a rainbow table for tokens of any practical complexity.