[Resource Topic] 2012/608: On the (Non-)Reusability of Fuzzy Sketches and Extractors and Security Improvements in the Computational Setting

Welcome to the resource topic for 2012/608

Title:
On the (Non-)Reusability of Fuzzy Sketches and Extractors and Security Improvements in the Computational Setting

Authors: Marina Blanton, Mehrdad Aliasgari

Abstract:

Secure sketches and fuzzy extractors enable the use of biometric data in cryptographic applications by correcting errors in noisy biometric readings and producing cryptographic materials suitable for authentication, encryption, and other purposes. Such constructions work by producing a public sketch, which is later used to reproduce the original biometric and all derived information exactly from a noisy biometric reading. It has been previously shown that release of multiple sketches associated with a single biometric presents security problems for certain constructions. We continue the analysis to demonstrate that all other constructions in the literature are also prone to similar problems and cannot be safely reused. To mitigate the problem, we propose for each user to store one short secret string for all possible uses of her biometric, and show that simple constructions in the computational setting have numerous advantageous security and usability properties under standard hardness assumptions. Our constructions are generic in that they can be used with any existing secure sketch as a black box.

ePrint: https://eprint.iacr.org/2012/608

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .