Security · 2h ago
Format-Preserving Encryption for PII in Polars: FF3-1 vs FF1
MaskOps introduces format-preserving encryption (FPE) for digit-based PII like Chilean RUTs, CPF, and DNI in Polars. The tool uses AES-256 and a client-held key to encrypt data while preserving length and check digits, enabling reversible pseudonymization. It supports FF3-1 and FF1 algorithms but only for digit strings, not alphanumeric IDs.
Meridian48 take
FPE is a useful tool for pseudonymization, but vendors often oversell it as anonymization—it's reversible by design and still personal data under GDPR.
Read the full reporting
Format-preserving encryption for PII in Polars: FF3-1 vs FF1 for RUT, CPF, and DNI →
DEV Community
format-preserving-encryptiondata-privacy