Skip to content

Commit cdf8b2d

Browse files
committed
Remove unneeded paragraph
1 parent c42e45f commit cdf8b2d

1 file changed

Lines changed: 0 additions & 17 deletions

File tree

draft-denis-ipcrypt.md

Lines changed: 0 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -383,23 +383,6 @@ Organizations requiring network metadata for analytics have two options:
383383

384384
Both approaches provide advantages over IP address truncation, which provides inconsistent protection and irreversibly destroys data.
385385

386-
Recommended approach:
387-
388-
1. Extract metadata (geographic location, ASN, network type) from the original IP address
389-
2. Store this information as separate fields alongside the encrypted IP address
390-
3. Apply appropriate privacy-preserving aggregation to the metadata itself
391-
392-
Example storage schema:
393-
394-
~~~
395-
{
396-
"encrypted_ip": "bde9:6789:d353:824c:d7c6:f58a:6bd2:26eb",
397-
"country": "US",
398-
"asn": 15169,
399-
"network_type": "cloud_provider"
400-
}
401-
~~~
402-
403386
# Prefix-Preserving Encryption {#prefix-preserving-encryption}
404387

405388
Prefix-preserving encryption maintains network structure in encrypted IP addresses. Addresses from the same network produce encrypted addresses that share a common prefix, enabling privacy-preserving network analytics while preventing identification of specific networks or users.

0 commit comments

Comments
 (0)