#digest #privacy #iop #crypto #hash #json #privacy-preserving

json-digest

Allow selective masking of JSON subdocuments for privacy, preserving the digest of the whole document

3 releases

0.0.16 Jun 30, 2022
0.0.15 Nov 9, 2021
0.0.5 Sep 21, 2020

#10 in #iop

Download history 63/week @ 2024-07-29 59/week @ 2024-08-05 46/week @ 2024-08-12 73/week @ 2024-08-19 121/week @ 2024-08-26 42/week @ 2024-09-02 48/week @ 2024-09-09 58/week @ 2024-09-16 113/week @ 2024-09-23 29/week @ 2024-09-30 26/week @ 2024-10-07 41/week @ 2024-10-14 32/week @ 2024-10-21 37/week @ 2024-10-28 34/week @ 2024-11-04 13/week @ 2024-11-11

125 downloads per month
Used in 13 crates (9 directly)

LGPL-3.0-or-later

27KB
415 lines

This library provides some algorithms to calculate cryptographically secure digests of JSON documents. Since JSON is an ambiguous serialization format, we also had to define a canonical deterministic subset of all allowed documents. Order of keys in an object and Unicode normalization are well-defined in this subset, making it suitable for hashing.

let data = serde_json::json!({
  "address": {
    "value": "6 Unter den Linden, Berlin, Germany",
    "nonce": "uN_FTaYe8JM-EZ8SU94kAOf0k0YvnhLcZgdpQ3BU9Ymbu"
  },
  "dateOfBirth": {
    "value": "16/02/2002",
    "nonce": "ufxkENKgXuf4yG50p6xpSyaQ8Gz7KsuqXid2yw533TUMK"
  },
  "placeOfBirth": {
    "city": "Berlin",
    "country": "Germany",
    "nonce": "ukhFsI4a6vIZEDUOBRxJmLroPEQ8FQCjJwbI-Z7bEocGo"
  },
});

let digest = json_digest::digest_data(&data).unwrap();
assert_eq!(digest, "cjuQR3pDJeaiRv9oCZ-fBE7T8QWpUGfjP40sAXq0bLwr-8");

let partial_digest = json_digest::selective_digest_data(&data, ".dateOfBirth").unwrap();
let expected_partial_digest = serde_json::json!({
  "address": "cjuvIf1PmPH_31JN5XqJ1xkcNDJyiw9zQ-7ansSB78gnt4",
  "dateOfBirth": {
    "nonce": "ufxkENKgXuf4yG50p6xpSyaQ8Gz7KsuqXid2yw533TUMK",
    "value":"16/02/2002"
  },
  "placeOfBirth": "cjub0Nxb0Kz0pI4bWCdSbaCutk1s5qieFT-ZmqUU1xcuAc"
});
assert_eq!(partial_digest, serde_json::to_string(&expected_partial_digest).unwrap());

let digest_from_partial = json_digest::digest_json_str(&partial_digest).unwrap();
assert_eq!(digest, digest_from_partial);

Dependencies

~5MB
~118K SLoC