unique pemutation using 3DES



Hi,

I am working on a problem where we have to share account ids with
another party. Account ids in this problem are 64 bit numeric
quantities. We do not want to reveal the id but want to preserve 1:1
mapping to allow 3rd party to correlate using the transformed id on
some event stream. The number of ids is huge and grows every day.

Furthermore the mapped quantity should be 64 bit numeric as well due
to limitations on 3rd party site. I thought may be I could use encrypt
account id using 3DES in ECB mode and just return the final block as
64 bit numeric quantity.

I have read that the block ciphers can be considered to be pseudo
random permutations and want to know if my approach is correct.

Normally if there was no constraint on output size, we would just
return a MAC and live with low chance of collision. I also think
XOR'ing each account id with a fixed random number that we keep secret
is not a good idea because it will leak relationship between account
numbers.

I am open to other suggestions as well but I want to avoid storing any
per account id meta data.

Thanks.

.



Relevant Pages

  • Re: Help - administrator locked out!
    ... The administrator account is not getting any password change ... we normally have a third party do ... reached expiry before letting us know ('us' being my colleagues who weren't ... Hopefully the local admin password ...
    (microsoft.public.windows.server.general)
  • Re: How Party Poker has stolen MY money
    ... RGP has no influence whatsoever in the poker world. ... with Party Poker started a couple weeks ago, ... was from a "fraudulent" account. ...
    (rec.gambling.poker)
  • How Party Poker has stolen MY money
    ... with Party Poker started a couple weeks ago, ... was from a "fraudulent" account. ... That's the first time I heard of this newsgroup. ...
    (rec.gambling.poker)
  • Re: How Party Poker has stolen MY money
    ... He says "I'll take it to RGP and make OMalley respond". ... with Party Poker started a couple weeks ago, ... was from a "fraudulent" account. ...
    (rec.gambling.poker)
  • Re: unique pemutation using 3DES
    ... Account ids in this problem are 64 bit numeric ... mapping to allow 3rd party to correlate using the transformed id on ... Triple DES (or Blowfish or Skipjack or RC5 or Khazad or whatever -- ...
    (sci.crypt)