BlindScreen

What runs

BFV homomorphic encryption, in your browser and in a small TAIA research service that holds an invented list. The service multiplies and adds ciphertexts with its list. It never holds a key that could open them.

What it does not hide

The size of the list, how many queries are made and when, and your network address. The service sees that a query arrived and how large it was. Once the demo has loaded, the page also asks the service which node it runs on, so the service sees that the page was opened, even if no name is sent.

What is still open

The protocol is a simplified research protocol written by TAIA, pending an outside cryptography review. A modified browser could ask about many names in one query, or learn more about the list than on or off, and the service could not tell. Spelling variants, transliterations and a changed name order are not found. A name that is not on the list can match by chance; the chance is shown with each answer. That the service did not see the name holds for this page’s code as TAIA publishes it: TAIA serves both this page and the service.

What it is not

This page is the public demo, not a screening service. The same encrypted check runs as a product in TAIA Confidential Screening, on public sanctions lists. Here, the list is invented and no real person is on it. The page writes no cookie and nothing to browser storage; the key lives in memory for one query and its memory is then released.

Check a name in TAIA Confidential Screening