Format-Preserving Encryption (FPE)

Encrypt data without changing its format

Challenges

The purpose of most encryption tools and techniques is to mask and then decrypt data. Unfortunately, their processes result in a ciphertext that is not human-readable and is often longer than the original field value.

The challenge lies in preserving the original format of the data in its protected state, so that it appears genuine, retains referential integrity checks, and can be used for testing.

When it comes to data privacy, both internal and external threats must be considered, including those against critical database and application resources. However, many protective mechanisms require application retrofitting or add complexity that delays or halts deployment. Format-preserving encryption overcomes these issues. It's an exciting step towards improved, simpler data privacy and regulatory compliance.

Trent Henry – Burton Group

Solutions

IRI's software products for Data masking Encrypt Personal Identifiable Information (PII) in databases and files using advanced Format-Preserving Encryption (FPE) technology (AES-128 and AES-256). Enhance your data column by column (or field by field) without altering the format or appearance of the original values.

With IRI FieldShield (for databases and flat files), IRI CellShield (for Excel) or IRI Voracity (for DBs, Files, HDFS, etc.) you can apply ad hoc or global FPE functions in a rule-based manner to:

  • Preserve and maintain the original data formats.
  • Maintaining referential integrity
  • Eliminate the need for multiple masking and lookup tables.
  • Eliminate formatting changes, database or application schemas.
  • Encrypting Primary and Foreign Keys
  • Provision of reversible data masking
Encrypt, for example, a 16-digit credit card number and display another 16-digit number in the same format:
Davor
Afterwards