External IV Tokenization Properties

The External IV is supported by all token types, except Datetime and Decimal tokens.

The tokenization with the External IV is done only if the IV is specified during the protect operation through the end user API. When performing unprotect and re-protect operations, the same IV value used for protection must be identified.

If External IV is not provided in either a protect or unprotect function call, then the input is tokenized as-is without any IV.

The External IV value has the following properties:

  • Supports ASCII and Unicode characters.
  • Minimum 1 byte for the input.
  • Maximum 256 bytes for the input.
  • Empty and NULL strings are not supported as External IV values. These strings will be ignored during tokenization. The process will continue as if External IV was not used.

Here is an example of the tokenized input value with the External IV for a Numeric token:

Table: Example-External IV for a Numeric token


Input Value

External IV

Output Value

Comments

1234567890

None

5108318538

External IV is not applied.

1234567890

1234

0442985096

Output values differ because different external IVs were applied.

12

1197578213

abc

9423146024

Last modified : August 20, 2025