FPE Formats
FPE supports the following formats. These formats help users to determine the structure of the output. It supports special character preservation.
Format | Description |
---|---|
LAST_FOUR | This format allows the user to keep intact the last four digits of the plaintext value after encryption. So, after encryption the last four digits of the ciphertext value will remain same as the input plaintext and rest digits will be encrypted using FPE algorithm. |
FIRST_SIX | This format allows the user to keep intact the first six digits of the plaintext value. So, after encryption the first six digits of the ciphertext value will remain same as input plaintext and rest digits will be encrypted using FPE. |
FIRST_SIX_LAST_FOUR | This format allows the user to keep intact the first six and last four digits of the plaintext value. So, after encryption the first six and last four digits of the ciphertext value will remain same as input plaintext and rest digits will be encrypted using FPE. |
FIRST_TWO_LAST_FOUR | This format allows the user to keep intact the first two and last four digits of the plaintext value. So, after encryption the first two and last four digits of the ciphertext value will remain same as input plaintext and rest digits will be encrypted using FPE. |
NONE | No format is applied with FPE. In this case, complete plaintext value is encrypted. |
Important points
These formats are not supported when performing bulk operations.
When using the above formats with FPE/AES/CARD10, the effective input data length must be less than 56 bytes. These formats are not supported with FPE/AES/CARD26, FPE/AES/CARD62, and FPE/AES/Unicode.