Obfuscation

It should be possible to use the masking filter for obfuscating values. That is, o consistently replace a certain value with something else.

For instance:

Bob   -> Dfg

Cecil -> Ghkrd

John  -> Klot

Bob   -> Dfg

John  -> Klot

...

The two critical properties are:

• A particular string should always be obfuscated in the same way.
• The obfuscation method should be such that it should not be trivial to reach to the original value from the obfuscated value (not e.g. ROT13).

In the masking configuration file this could be represented e.g. as.

{

    "rules": [

        {

            "obfuscate": {

                "column": "ssn"

            },

            "applies_to": [ ... ],

            "exempted": [ ... ]

        },

    ...

but note that the above is only for illustrative purposes. The actual way for expressing what should be obfuscated and how is to be defined during the development.