A Quantum-Resistant Face Template Protection Scheme using Kyber and Saber Public Key Encryption Algorithms

Abstract

Considered sensitive information by the ISO/IEC 24745, biometric data should be stored and used in a protected way. If not, privacy and security of end-users can be compromised. Also, the advent of quantum computers demands quantum-resistant solutions. This work proposes the use of Kyber and Saber public key encryption (PKE) algorithms together with homomorphic encryption (HE) in a face recognition system. Kyber and Saber, both based on lattice cryptography, were two finalists of the third round of NIST post-quantum cryptography standardization process. After the third round was completed, Kyber was selected as the PKE algorithm to be standardized. Experimental results show that recognition performance of the non-protected face recognition system is preserved with the protection, achieving smaller sizes of protected templates and keys, and shorter execution times than other HE schemes reported in literature that employ lattices. The parameter sets considered achieve security levels of 128, 192 and 256 bits.

A Review of Homomorphic Encryption for Privacy-Preserving Biometrics

“…Since the protected templates are irreversible even in the case of a compromised secret key (often referred to as the fully compromised case), using CB prior to HE strengthens the security and privacy of the whole system and reduces template dimensions, which accelerates the computation of ciphertexts. Román et al [ 59 ] used public key encryption and HE to protect facial data. The experimental results showed that recognition performance is retained after protection.…”

Post-Quantum Biometric Authentication Based on Homomorphic Encryption and Classic McEliece

“…However, since communication, storage and authentication are performed on the cloud, biometric features should be protected. Homomorphic encryption not only allows for features to be protected at communication and storage, but also whenever they are compared [4][5][6][7][8][9][10]. Only the comparison result is obtained in the unprotected domain by the authentication server (as illustrated in Figure 1b).…”

“…In order to provide long-term security, post-quantum cryptography should be considered. Currently, several quantumresistant biometric protection schemes have been proposed based on lattice cryptography [6][7][8][9][10]14,15]. However, further research is needed to improve the performance and employ standard solutions.…”

“…More recently, homomorphic encryption has been applied to biometric recognition [4][5][6][7][8][9][10]13]. Several solutions are not resistant to attacks from quantum computers [4,5].…”

“…Several solutions are not resistant to attacks from quantum computers [4,5]. Most of the quantum-resistant solutions are based on lattice cryptography [6][7][8][9][10]. Many of them employ a device-centric architecture, where the biometric features b R and b V are encrypted at the client site with the public key of the client pk C , resulting in E(b R , pk C ) and E(b V , pk C ), respectively.…”