|
|
|
|
|
|
by mahmoudimus
2855 days ago
|
|
|
(disclaimer: I work at VGS) We offer a variety of various format preserving aliasing algorithms. Only legacy systems tend to choose the SSNs if they have fixed-width columns in their RDBMS that are difficult to change (imagine petabytes of data). The idea behind format preserving aliases is actually based on the NIST SP 800-3G standard[1]. We use FF1 and are actively engaging with the world's leading cryptographers such as: https://cryptoonline.com/publications/. Happy to share more in detail if there's interest. Please email me: mahmoud @ ${COMPANY_NAME}.com [1] https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.S... |
|
|
Ask your cryptographer if the algorithm they're proposing you to use is IND-CCA2 secure (especially if it meets the criteria for IND-CCA3).
Litmus test: If they don't know what that means, you shouldn't be trusting them for cryptography advice.
If it isn't IND-CCA2 secure, you shouldn't be using it. Full stop.
For the curious: https://tonyarcieri.com/all-the-crypto-code-youve-ever-writt...
The IND in IND-CCA2 means "INDistinguishable"; i.e. from randomly generated line noise. For symmetric cryptography, your ciphertext shouldn't have any structure to it. (Lattices and such are a different story. If structure is permissible for your security goals, you're probably doing asymmetric cryptography anyway.)
To be clear: Format-preserving, order-preserving, order-revealing, and homomorphic encryption technology-- while an exciting research area-- fails to meet this requirement and should not be used for non-experimental purposes until their techniques have had time to mature. And even then, until they meet this requirement, only when the threat model doesn't realistically include the possibility of adaptive chosen-ciphertext attacks. (Spoiler: A real world threat model will almost certainly always include that.)
> We use FF1 and are actively engaging with the world's leading cryptographers
I've seen this "we engage with the world's leading cryptographers" genre of claim before, albeit from a much more arrogant source: https://news.ycombinator.com/item?id=6916860