[rssac-caucus] FOR REVIEW: Harmonizing the Anonymization of Queries to the Root
Wessels, Duane
dwessels at verisign.com
Thu Feb 15 00:22:48 UTC 2018
> On Feb 14, 2018, at 3:26 PM, Paul Hoffman <paul.hoffman at icann.org> wrote:
>
> On Feb 14, 2018, at 3:17 PM, Wessels, Duane via rssac-caucus <rssac-caucus at icann.org> wrote:
>> The PNG images are quite large (4096x4096) so you may need to download and/or zoom in to see some of the detail. Maybe this will be helpful for others and I'm happy to answer any questions about it.
>
> I have one: what is this meant to show? AES-with-truncation and ipcrypt will have results fairly evenly spread through the entire 0/0 space, and Cryptopan will have chunks that are similar to the chunks in the input.
It is meant to show (to me at least) that it actually works as described.
I knew cryptopan is prefix-preserving, but before this exercise I didn't realize it actually keeps addresses in their RFC791-era classes (A,B,C,D,E). That is, a class C input address remains in class C in the output, etc.
DW
More information about the rssac-caucus
mailing list