CryptoPANT

CryptopANT is a C library for IP address anonymization using crypto-PAn algorithm, originally defined by Georgia Tech. The library supports anonymization and de-anonymization (provided you possess a secret key) of IPv4, IPv6, and MAC addresses. The software release includes sample utilities that anonymize IP addresses in text, but we expect most use of the library will be as part of other programs. The Crypto-PAn anonymization scheme was developed by Xu, Fan, Ammar, and Moon at Georgia Tech and described in "Prefix-Preserving IP Address Anonymization", Computer Networks, Volume 46, Issue 2, 7 October 2004, Pages 253-272, Elsevier. Our library is independent (and not binary compatible) of theirs.

Building CryptopANT

To build cryptopANT:

./configure --with-scramble_ips
make
sudo make install

or if building from git, start with:

	./autogen.sh

Crypto algorithms used

Our library supports several pluggable crypto algorithms for anonymization. Currently supported are:

• AES
• SHA1
• Blowfish
• MD5 These algorithms come from openssl library.

Beginning v1.4.0 cryptopANT when creating new keys will use AES by default as preferred crypto. Previously, it was defaulting to Blowfish. The reason for switch is that after switching to openssl v3 api (EVP), we noticed a marked slowdown in Blowfish. Old keys using Blowfish will still remain usable, but if the performance is too slow, we advise switching to new keys using AES or sticking with an older version of cryptopANT.