AFAIK that's what youtube did, but the key eventually got leaked and attackers were using it to enumerate unlisted videos. They ended up switching to randomly generated ids. Unless you're dealing with billions of rows, the additional column + index is negligible, so it's better go with that approach rather than to be clever with encrypting ids