[rssac-caucus] [Ext] Re: FOR REVIEW: Harmonizing the Anonymization of Queries to the Root

[Paul Hoffman]

On Feb 14, 2018, at 4:22 PM, Wessels, Duane <dwessels at verisign.com> wrote:
> It is meant to show (to me at least) that it actually works as described.  
> 
> I knew cryptopan is prefix-preserving, but before this exercise I didn't realize it actually keeps addresses in their RFC791-era classes (A,B,C,D,E).  That is, a class C input address remains in class C in the output, etc.

That surprises me, and might indicate an error in the implementation. Every bit in the input is supposed to be mixed evenly, and it sounds like at least the first set of bits in that implementation is not.

--Paul Hoffman