B BIOCKKSBiometric API Console
Production OpenAPI
Checking API
Interactive production client

API Console

Submit real multipart requests to https://biockks.rabaz.co.il.

HTTPSAES-256-GCMCKKS
POST/v1/boxes

Create user box

Enroll one trusted image. The server generates the opaque box ID.

RSAUser RSA key pairGenerated in this browser. The API receives only the public key.
Generating
Inspect or regenerate user RSA keys

Generating a 3072-bit RSA-OAEP key pair...

Persisted encrypted: image, wrapped image key, embedding, and metadata.
Implementation reference

Processing and storage

No database is used. The application and encrypted files run on Google Cloud.

01

Image pipeline

  1. Validate JPEG/PNG
  2. Detect and align one face
  3. AdaFace 512-D embedding
  4. L2 normalize
  5. CKKS encrypt or compare
02

Persistent box files

image.enc
AES-256-GCM image
image_key.wrapped
RSA-OAEP wrapped AES key
embedding.ckks
Encrypted vector
metadata.enc
Encrypted metadata
03

Encrypted comparison

TenSEAL computes the dot product on CKKS ciphertext vectors. Only the final one-number score is decrypted and compared with threshold 0.60.

Current limitation: the CKKS score-decryption key is still inside the VM.