I have PII in my logs that I would like to replace with hashes (e.g.
sha3-256(salt + email)). The idea is that I can always go back to my logs and find all the log lines with that email address, by searching on the hash result of
sha3-256(salt + email).
How hard would it be for folks to retrieve the original email address? I'm assuming the salt is fixed, and kept secret and the salt is >= 32 bytes.
Will this setup provide any real security if the logs are leaked?