> are you OK with the bank using a hash of your account number to identify your account instead of the number itself? Why not? Cryptographically, entropically,

> are you OK with the bank using a hash of your account number to identify your account instead of the number itself? Why not? Cryptographically, entropically, there's no difference between a call to "give me a uuid to throw on this new account" and "now crunch it through a sponge function and use that instead" Your uuid generator will probably check for uniqueness, or your database will enforce unique values, so there's a few places you would be alerted of the collision, but 2^256 is a very large number