Vault Enterprise Transform Secrets Engine - FPE on Dates

We are evaluating Vault Enterprise for its FPE capabilities using the transform secrets engine. What we are struggling with at the moment is to apply FPE on dates. Has this been done before? I tried a regular expression like (\d{4})/ / . But this generates a invalid dates like 8823/38/41 obviously because the regex simply is a constraint on the digits. How can I do it better so I get close, if not perfectly match a proper date in FPE?

It’s certainly an interesting problem. The F in FPE is format, so you can’t expect readability or data storage to be maintained. Maybe have a talk with the Hashicorp pre-sales team on their suggestions on using transform on birthdays to see what they think?

1 Like