# Hypersphere Secure Sketch Revisited: Probabilistic Linear Regression Attack on IronMask in Multiple Usage

arXiv: https://arxiv.org/abs/2409.12884 · HTML: https://mlsanity.com/paper/2409.12884/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Builds on 10 of its 54 references that are in the map.
- First posted on arXiv 19 Sep 2024.

## Builds on (most cited first, 10 of 10)

- [FaceNet: A Unified Embedding for Face Recognition and Clustering](https://mlsanity.com/paper/1503.03832/) (2015)
- [SphereFace: Deep Hypersphere Embedding for Face Recognition](https://mlsanity.com/paper/1704.08063/) (2017)
- [MagFace: A Universal Representation for Face Recognition and Quality Assessment](https://mlsanity.com/paper/2103.06627/) (2021)
- [On the Reconstruction of Face Images from Deep Face Templates](https://mlsanity.com/paper/1703.00832/) (2017)
- [Ranking Based Locality Sensitive Hashing Enabled Cancelable Biometrics: Index-of-Max Hashing](https://mlsanity.com/paper/1703.05455/) (2017)
- [Zero-Shot Deep Hashing and Neural Network Based Error Correction for Face Template Protection](https://mlsanity.com/paper/1908.02706/) (2019)
- [IronMask: Modular Architecture for Protecting Deep Face Template](https://mlsanity.com/paper/2104.02239/) (2021)
- [Inference in High-Dimensional Linear Regression via Lattice Basis Reduction and Integer Relation Detection](https://mlsanity.com/paper/1910.10890/) (2019)
- [Neural Fuzzy Extractors: A Secure Way to Use Artificial Neural Networks for Biometric User Authentication](https://mlsanity.com/paper/2003.08433/) (2020)
- [Revisiting Fuzzy Signatures: Towards a More Risk-Free Cryptographic Authentication System based on Biometrics](https://mlsanity.com/paper/2112.08658/) (2021)

## Abstract (arXiv)

Protection of biometric templates is a critical and urgent area of focus. IronMask demonstrates outstanding recognition performance while protecting facial templates against existing known attacks. In high-level, IronMask can be conceptualized as a fuzzy commitment scheme building on the hypersphere directly. We devise an attack on IronMask targeting on the security notion of renewability. Our attack, termed as Probabilistic Linear Regression Attack, utilizes the linearity of underlying used error correcting code. This attack is the first algorithm to successfully recover the original template when getting multiple protected templates in acceptable time and requirement of storage. We implement experiments on IronMask applied to protect ArcFace that well verify the validity of our attacks. Furthermore, we carry out experiments in noisy environments and confirm that our attacks are still applicable. Finally, we put forward two strategies to mitigate this type of attacks.