Patrick SteinAug 21, 2015
Encrypted public contact discovery
Stepan Korshakov
41
So, I know my friend’s phone number is 18009763333. How do I find his info? I have to go through every different SALT used in the database and encrypt my friend’s phone number with that SALT and see if it is in the database?
And, no matter how it’s done, there isn’t that much entropy in phone numbers. I could easily brute force everyone in a given LATA, for example.