[rssac-caucus] FOR REVIEW: Harmonizing the Anonymization of Queries to the Root

[Wessels, Duane]

> On Feb 14, 2018, at 3:26 PM, Paul Hoffman <paul.hoffman at icann.org> wrote:
> 
> On Feb 14, 2018, at 3:17 PM, Wessels, Duane via rssac-caucus <rssac-caucus at icann.org> wrote:
>> The PNG images are quite large (4096x4096) so you may need to download and/or zoom in to see some of the detail.  Maybe this will be helpful for others and I'm happy to answer any questions about it.
> 
> I have one: what is this meant to show? AES-with-truncation and ipcrypt will have results fairly evenly spread through the entire 0/0 space, and Cryptopan will have chunks that are similar to the chunks in the input.

It is meant to show (to me at least) that it actually works as described.  

I knew cryptopan is prefix-preserving, but before this exercise I didn't realize it actually keeps addresses in their RFC791-era classes (A,B,C,D,E).  That is, a class C input address remains in class C in the output, etc.

DW