If I'm reading it right, security of the entire system depends on an assumption that 48-bit numbers are so big it's infeasible to find what you need through brute force.