Sanctum / Security / Traffic Analysis
Traffic Analysis protection
Latest release: sanctum 1.4.1
How shroud works
Sanctum offers very strong traffic analysis protection, being able to make each packet look distinct from its original packet for each hop it takes (even across cathedrals). It masks away the entire packet, including all of the protocol meta-data and makes the packets look like random data on the wire.
This feature is called shroud and is available in sanctum since version 1.1.0.
Shroud is off by default as it increases overhead and affects performance by
about 45% becuse it has to shroud/unshroud each individual packet with
additional unique per-packet masks.