On: Goodbye integers, hello UUIDv7

[fodkodrasz]

No IV, ECB mode... why bother with encryption at all? Just expose the internal id.

[computerfriend → fodkodrasz]

ECB is perfectly secure when you use it on a single block.

[fodkodrasz → computerfriend]

And you have no problem with the same data being encrypted being identifyable (no salt). i see now why it might be useful in this case, though I still don’t like the idea, it feels bad somehow. (Yeah I get that you save storage for some computation)

[adrian_b → fodkodrasz]

Encrypting an internal id with ECB into an external id continues to allow the comparison for equality of 2 ids, to determine whether they are the same or not, but except for this it removes all the information contained in the structure of an UUID.

[bajsejohannes → fodkodrasz]

You would still use a secret key, so it's impossible for the end user to decrypt it.

[isbvhodnvemrwvn → fodkodrasz]

You are encrypting a single block of unique information. No other encryption mode gives you any advantages whatsoever.

[remram → fodkodrasz]

Because the internal ID exposes timing/sequence information, as per jonhohle's comment.