Returns the hex-encoded digest of salt + normalize(input) using the
given algorithm via the Web Crypto API. Works in Node 20+, Deno, Bun,
modern browsers, and edge runtimes.
Use this for deterministic equality lookups when you must not store raw
PII. ALWAYS supply a per-tenant or per-user salt — an unsalted SHA-256 of
an 11-digit CPF can be brute-forced in milliseconds.
Returns the hex-encoded digest of
salt + normalize(input)using the given algorithm via the Web Crypto API. Works in Node 20+, Deno, Bun, modern browsers, and edge runtimes.Use this for deterministic equality lookups when you must not store raw PII. ALWAYS supply a per-tenant or per-user salt — an unsalted SHA-256 of an 11-digit CPF can be brute-forced in milliseconds.