Secure Lookup framework

Determines how input values are mapped to lookup file entries.

• SHA256 - This hash method is the default hash method for extensible secure lookup algorithms.

• LEGACY - This hash method is used to mimic the legacy secure lookup behavior in the extensibility framework.

• RANDOMIZE - This method replaces the input value with a random value from the lookup file. It internally uses a PRNG (pseudorandom number generator) to generate a random index with a uniform distribution (equal probability) which is subsequently used to fetch the value from the lookup file.

This file is a single list of values that does not require a header, every line of the Lookup File might be used as a masked value. The Lookup File must be ASCII or UTF-8 encoding compatible. The lookup file can be referenced locally or with a specified/uploaded URI. The following is sample file content:

Smallville

Clarkville

Farmville

Townville

Cityname

Citytown

Towneaster

Determines whether input case differences affect the lookup result. If the Case Sensitive Lookup box is marked then the same input of different cases will be masked to the different values. For example:

Peter -> John

peter -> Andrew

If that setting is not marked (which is a default option), then the lookup would be case insensitive, for example:

Peter -> John

peter -> John

Removes leading and trailing whitespace from values in the lookup file. The handling of whitespace should be carefully considered. By default, leading and trailing whitespace is preserved and will be passed back into the data around the new masked string. The following options are available:

• Trim Whitespace in Lookup File: This assumes that any whitespace leading or trailing strings in your lookup file is erroneous and should be removed. If such whitespace is part of your valid data format, this option should not be selected. If not selected, whitespace will be output as part of the masked data.

• Trim Whitespace from Inputs: This assumes that any whitespace in your unmasked source data is erroneous and should be removed. If such whitespace is part of your valid data format or you want leave erroneous whitespace in place to simulate realistic dirty data, this option can be left unselected.

Please note that the options selected could cause the following problems if not carefully considered:

1. Job fails to mask table or file with the database or connector reporting a string length is longer than the length supported by the column or field.

   1. If Trim Whitespace from Input is not selected and the field is completely space padded to the maximum length, and the masked string is longer than the source unmasked string, the result could be longer than the maximum length allowed. This is more likely to occur when dealing with non-ASCII data, as field length reporting in relation to length in bytes versus characters is inconsistent among all databases and connectors.

2. The job succeeds but referential integrity is broken at the application level. In rare cases, the definition of two fields that should have referential integrity, may have different maximum lengths. If whitespace is part of the valid data format, output whitespace could be trimmed to fit the shorter of the fields but fit untrimmed in another field.

   1. If such a possibility exists, users should select Trim Whitespace from Input, deselect Trim Whitespace in Lookup File, and provide any required whitespace via the lookup file up to, but not exceeding, the maximum length of the shortest field masked by the same algorithm.

Controls how the case of masked values is formatted. It has the following options:

• Preseve Lookup File Case - keep the masked value as found in the Lookup File.

• Preserve Input Case - check the input case, which can be one of the following three:

• All uppercase - in that case, force the whole masked value to uppercase.

• All lowercase - in that case, force the whole marked value to lowercase.

• Mixed (if at least 1 character case is different from others) - in that case keep the masked value as found in the Lookup File

• Force all Uppercase - forces the whole masked value to uppercase

• Force all Lowercase - forces the whole masked value to lowercase