Irreversible Token

Application Data Protection allows you to generate tokens that can't be reversed. An irreversible token refers to a value that can't be converted back to its original input. So, when a user tries to reveal an irreversible token, the client returns the same value. This parameter is configured when creating protection policy. By default, it is disabled on the UI.

Application Data Protection provides support of irreversible tokens in the following algorithms:

Example

• Input data: 1234567

• Output after protect operation: 10010003108044

• Output after reveal operation: 3108044

Important Notes

• For FPE algorithms, if irreversible token is configured, tweak algorithm and tweak data are not supported.

• For AES algorithms, if irreversible token is configured, IV is not supported.