Format-Preserving Encryption Tool MaskOps Protects RUT, CPF, DNI Data in Polars
MaskOps, a Python library, offers format-preserving encryption (FPE) to pseudonymize digit-based personal identifiers such as Chilean RUTs, Brazilian CPFs, and Argentine DNIs within Polars dataframes. Unlike asterisk masking or hashing, FPE transforms an identifier into another valid, same-format value that can be consistently joined across datasets and later decrypted using a client-held key. The library supports two NIST-approved algorithms, FF3-1 and FF1, both built on AES-256 Feistel networks, with FF3-1 set as the default. Critically, MaskOps makes no network calls and stores no data, meaning the encryption key never leaves the client's control, satisfying GDPR Article 4(5) requirements for pseudonymization. However, the tool's documentation emphasizes that FPE output remains personal data under GDPR since it is reversible, and should not be treated as full anonymization.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in