Struct google_dlp2::GooglePrivacyDlpV2CryptoDeterministicConfig

pub struct GooglePrivacyDlpV2CryptoDeterministicConfig {
    pub crypto_key: Option<GooglePrivacyDlpV2CryptoKey>,
    pub context: Option<GooglePrivacyDlpV2FieldId>,
    pub surrogate_info_type: Option<GooglePrivacyDlpV2InfoType>,
}

Pseudonymization method that generates deterministic encryption for the given input. Outputs a base64 encoded representation of the encrypted output. Uses AES-SIV based on the RFC https://tools.ietf.org/html/rfc5297.

This type is not used in any activity, and only used as part of another schema.

Fields

crypto_key: Option<GooglePrivacyDlpV2CryptoKey>

The key used by the encryption function.

context: Option<GooglePrivacyDlpV2FieldId>

Optional. A context may be used for higher security and maintaining referential integrity such that the same identifier in two different contexts will be given a distinct surrogate. The context is appended to plaintext value being encrypted. On decryption the provided context is validated against the value used during encryption. If a context was provided during encryption, same context must be provided during decryption as well.

If the context is not set, plaintext would be used as is for encryption. If the context is set but:

1. there is no record present when transforming a given value or
2. the field is not present when transforming a given value,

plaintext would be used as is for encryption.

Note that case (1) is expected when an InfoTypeTransformation is applied to both structured and non-structured ContentItems.

surrogate_info_type: Option<GooglePrivacyDlpV2InfoType>

The custom info type to annotate the surrogate with. This annotation will be applied to the surrogate by prefixing it with the name of the custom info type followed by the number of characters comprising the surrogate. The following scheme defines the format: ():

For example, if the name of custom info type is 'MY_TOKEN_INFO_TYPE' and the surrogate is 'abc', the full replacement value will be: 'MY_TOKEN_INFO_TYPE(3):abc'

This annotation identifies the surrogate when inspecting content using the custom info type 'Surrogate'. This facilitates reversal of the surrogate when it occurs in free text.

In order for inspection to work properly, the name of this info type must not occur naturally anywhere in your data; otherwise, inspection may either

• reverse a surrogate that does not correspond to an actual identifier
• be unable to parse the surrogate and result in an error

Therefore, choose your custom info type name carefully after considering what your data looks like. One way to select a name that has a high chance of yielding reliable detection is to include one or more unicode characters that are highly improbable to exist in your data. For example, assuming your data is entered from a regular ASCII keyboard, the symbol with the hex code point 29DD might be used like so: ⧝MY_TOKEN_TYPE

Trait Implementations

impl Part for GooglePrivacyDlpV2CryptoDeterministicConfig

impl Default for GooglePrivacyDlpV2CryptoDeterministicConfig

fn default() -> GooglePrivacyDlpV2CryptoDeterministicConfig

Returns the "default value" for a type.

impl Clone for GooglePrivacyDlpV2CryptoDeterministicConfig

fn clone(&self) -> GooglePrivacyDlpV2CryptoDeterministicConfig

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GooglePrivacyDlpV2CryptoDeterministicConfig

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.

impl Serialize for GooglePrivacyDlpV2CryptoDeterministicConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl<'de> Deserialize<'de> for GooglePrivacyDlpV2CryptoDeterministicConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.