Psycrypt

An EEG-based authentication system that uses a person's brainwave patterns to protect access to GPG private keys. After a successful authentication, the key is available only in memory for the active session and is wiped when the session ends.

Authentication Process

During enrolment, Psycrypt records a short EEG session and turns it into a reusable biometric template. During authentication, it compares a new reading with that enrolled pattern to determine whether it belongs to the authorised user. The process is designed to be quick enough for normal use while accounting for the natural variation in EEG signals.

Protecting the Key

The enrolled template is used to protect the encrypted key material without storing a usable private key in plaintext. A successful authentication reconstructs the information needed to decrypt the key for the current session. That temporary key material is kept in memory only and cleared afterwards.

Local Identity Check

Psycrypt uses advanced machine-learning algorithms to distinguish the enrolled user from other people. Authentication runs locally, so it does not depend on a cloud service or an external processing system.