Comment by eru

> And of course I’m still very curious whether there’s a cryptanalysis approach that lets me achieve more effective search over a random-ish ordering of UUIDs. I’m gonna do some more reading there.

I think that's definitely possible. Especially if you realise that you only need a random-ish looking order, not a cryptographically secure random order.