A Systematization of Knowledge on Biomarker Based Encryption Keys

Abstract

Encryption keys require careful management, they must be securely stored, and if stolen or compromised, the consequences can be catastrophic. Ephemeral keys are created, used and then deleted, reducing the attack surface. As the tactics, techniques and procedures of threat actors continue to evolve, implementing an ephemeral encryption key would enhance the protection of critical infrastructure systems, sensitive data and communication systems. This research investigates the feasibility of generating a repeatable, unique, yet transient encryption key from human biomarkers. By deriving cryptographic keys directly from bioelectrical and biochemical markers, key management overhead and long-term exposure risks can be minimized. This Systematization of Knowledge (SoK) addresses two primary challenges. Firstly, determining the viability and limitations of deriving consistent keys from inherently variable biomarkers. Secondly, we propose a manifold encryption key derivation scheme using context dependent signals drawn from the network, device and environment to overcome the limitations of biometric based key generation, including irrevocability, noise, and entropy deficiency.