Encrypting IP Addresses - Bert Hubert's writings
a day ago
- Privacy concerns often conflict with security analysis; however, infected users lose privacy, justifying research.
- Encrypting IP addresses with a secret key, held by a privacy officer, allows analysis while protecting privacy.
- IP encryption must preserve the address format; common ciphers like AES fail for IPv4 due to size mismatches.
- ipcrypt, designed in 2015 by Jean-Philippe Aumasson, encrypts IPv4 addresses to other IPv4 addresses using a 128-bit key.
- IPv6 simplifies encryption because its 128-bit length supports standard block ciphers like AES.
- Encryption provides pseudonymity, not anonymity; static keys risk correlation and leaks, but frequent key changes mitigate these issues.
- Anonymized DNS traffic analysis at PowerDNS enables quick detection of compromised accounts, benefiting security.