Iranian Society of Cryptology The ISC International Journal of Information Security 2008-2045 1 1 2009 01 28 A collusion attack on the fuzzy vault scheme 27 34 39164 10.22042/isecure.2015.1.1.4 EN H. T. Poon A. Miri Journal Article 2008 07 01 The Fuzzy Vault scheme is an encryption scheme, which can tolerate errors in the keys. This leads to the possibility of enhancing the security in environments where these errors can be common, such as biometrics storage systems. Although several researchers have provided implementations, we find that the scheme is vulnerable to attacks when not properly used. This paper describes an attack on the Fuzzy Vault scheme where the attacker is assumed to have access to multiple vaults locked by the same key and where a non-maximal vault size is used. The attack effectively reduces the vault size by identifying and removing cha_ points. As the vault size decreases, the rate at which cha_ points are identified increases exponentially. Several possible defenses against the attack are also discussed. https://www.isecure-journal.com/article_39164_022e17ea8e4b56279362591de2d4794d.pdf