Your face
your key

Biometric Encryption Without Storing the Face

When you scan your face, LUME generates an ephemeral random ECC public key.

Using that key, it encrypts the metadata and creates an encrypted packet that can only be unlocked when you present your face again — at which point the correct private key is generated to decrypt it.

Only You Holds Your Private Keys

Decentralized private keys (signing, encryption, connection keys) live inside a biometric-locked, quantum-secure data container, only your face can decrypt it.

The server never sees your private keys and cannot impersonate you, even if compromised.

Post-Quantum Security

LUME uses ML-KEM and ML-DSA (lattice-based NIST PQC standards) to ensure your encryption is safe from both classical and future quantum threats.

Privacy-Preserving Public-Key Exchange

LUME uses unlinkable key lookups.

This prevents metadata correlation and protects your identity even at the networking layer.

Self-Verifying Identities

All keys are self-certifying, ensuring no attacker—or even the server—can inject or substitute malicious keys.

End-to-End Encrypted Contact Handshakes

Every connection is formed through a mutual key exchange, secure number generation, and face-verified endorsement, ensuring you always know exactly who you’re talking to.