Skip to content

Commit c0b1f1d

Browse files
committed
Generally recommend storing auxiliary data
1 parent 4ce9309 commit c0b1f1d

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

draft-denis-ipcrypt.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -395,6 +395,8 @@ Organizations requiring network metadata for analytics have two options:
395395

396396
Both approaches provide advantages over IP address truncation, which provides inconsistent protection and irreversibly destroys data.
397397

398+
When auxiliary information such as AS number and geographical location is required, it SHOULD be stored as metadata at the time of logging. Performing these mappings later may yield different results as network allocations and routing information change over time. This recommendation applies to all encryption modes: even with `ipcrypt-pfx`, the preserved network structure does not retain these additional attributes.
399+
398400
# Prefix-Preserving Encryption {#prefix-preserving-encryption}
399401

400402
Prefix-preserving encryption maintains network structure in encrypted IP addresses. Addresses from the same network produce encrypted addresses that share a common prefix, enabling privacy-preserving network analytics while preventing identification of specific networks or users.

0 commit comments

Comments
 (0)