International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Reusable Cryptographic Fuzzy Extractors

Authors:
Xavier Boyen
Download:
URL: http://eprint.iacr.org/2004/358
Search ePrint
Search Google
Abstract: We show that a number of recent definitions and constructions of fuzzy extractors are not adequate for multiple uses of the same fuzzy secret---a major shortcoming in the case of biometric applications. We propose two particularly stringent security models that specifically address the case of fuzzy secret reuse, respectively from an outsider and an insider perspective, in what we call a chosen perturbation attack. We characterize the conditions that fuzzy extractors need to satisfy to be secure, and present generic constructions from ordinary building blocks. As an illustration, we demonstrate how to use a biometric secret in a remote error tolerant authentication protocol that does not require any storage on the client's side.
BibTeX
@misc{eprint-2004-12321,
  title={Reusable Cryptographic Fuzzy Extractors},
  booktitle={IACR Eprint archive},
  keywords={foundations / error tolerant cryptography, identification protocols, biometrics},
  url={http://eprint.iacr.org/2004/358},
  note={An extended abstract appears in ACM CCS 2004. eprint@boyen.org 12767 received 14 Dec 2004, last revised 15 Dec 2004},
  author={Xavier Boyen},
  year=2004
}