Python implementation of cryptographic longterm key hashing. Supports Python versions 2.7+, 3.5+
This is as described by Rainer Schnell, Tobias Bachteler, and Jörg Reiher in A Novel Error-Tolerant Anonymous Linking Code
Install clkhash with all dependencies using pip:
pip install clkhash
If the installation of bitarray
fails on Windows you may need to install the appropriate
Visual Studio C++ compiler for your version
of Python; this is required because the bitarray
library compiles a C extension.
https://clkhash.readthedocs.io
After installation of the clkhash library you should have a clkutil
program in your path.
Alternatively you can use python -m clkhash.cli
.
This command line tool can be used to process PII data into Cryptographic Longterm Keys. The tool also has an option for generating fake PII data, and commands to upload hashes to an entity matching service.
$ clkutil generate 1000 fake-pii-out.csv
$ head -n 4 fake-pii-out.csv
INDEX,NAME freetext,DOB YYYY/MM/DD,GENDER M or F
0,Libby Slemmer,1933/09/13,F
1,Garold Staten,1928/11/23,M
2,Yaritza Edman,1972/11/30,F
A schema is required to hash this data. You can retrieve the default schema with
$ clkutil generate-default-schema fake-pii-schema.json
or you can make your own.
To hash this data using its schema, with the shared secret key horse_staple
:
$ clkutil hash fake-pii-out.csv horse_staple fake-pii-schema.json /tmp/fake-clk.json
CLK data written to /tmp/fake-clk.json
Note the secret should only be shared with the other entity - and not with anyone carrying out the record linkage. Knowledge of this secret allows reconstruction of the PII from the CLKs.
To use the command line tool without installing clkhash
, install the dependencies, then run:
python -m clkhash.cli
To hash a CSV file of entities using the default schema:
from clkhash import clk, randomnames
fake_pii_schema = randomnames.NameList.SCHEMA
clks = clk.generate_clk_from_csv(open('fake-pii-out.csv','r'), 'secret', fake_pii_schema)