3 ms·
I don't think most fingerprint with systems store actual fingerprints - think of it more like a hash, much like secure password storage. Stealing the data doesn
by matthewmacleod 10y ago
I don't think most fingerprint with systems store actual fingerprints - think of it more like a hash, much like secure password storage. Stealing the data doesn't let you authenticate to other systems.
- zo1 10y agoThey store "minutiae" (sort of like keypoints) of the scanned fingerprints. As far as I know, there are no known methods of reliably hashing fingerprint/iris data. The problem is the scanner/input-device. Unlike a password, the "input" is not always constant in what it gives you. So the resulted "hashed" value is not something you can "hit" again in order to do matching.
- _red 10y agoSome fingerprint drivers (like DigitalPersona) allow you to change a preset value that acts as a "salt" for the minutiae. Obviously this salt must be shared among all installations of the driver for the results to be consistent. However the end result is that you are not storing raw minutiae but its salted variant.