Traffic Analysis protection

Sanctum offers very strong traffic analysis protection, being able to make each packet look distinct from its original packet for each hop it takes (even across cathedrals). It masks away the entire packet, including all of the protocol meta-data and makes the packets look like random data on the wire.

This feature is called shroud.

Shroud is off by default as it increases overhead and affects performance by about 45% as it has to shroud/unshroud each individual packet with additional unique per-packet masks.