> Is that how it is done these days? Well, I don't know the exact specifics, but that's how I would implement security for biometrics input devices. Apart from

> Is that how it is done these days? Well, I don't know the exact specifics, but that's how I would implement security for biometrics input devices. Apart from that, I seem to recall that Apple does something with validating various sensors and rejecting "unknown" sensors (although that might be based on sensor make/model/SN and not necessarily cryptographic) > Also this will not prevent a physical identical fingerprint model attack Correct, but no fingerprint reader that is only a fingerprint reader will prevent such an attack: No lock is made to be unopenable by (a copy of) the key to that lock. If your fingerprint is the key, a good enough physical copy of the fingerprint will open the locked device.