Re:Short, friendly base32 slugs from timestamps
by paulgb on Thursday January 19, 2023 @06:17AM
(#34439106)
If an attacker can generate sequential hashids, they can decipher the alphabet order that hashids use without needing to know the seed, and then use the seed to invert other hashids.
I wrote a library that generates short IDs with the goal of making the similarity between two codes have nothing to do with sequence order.
How? I mean they're of course no cryptographic measure but with the salt you have some secrecy.