Imagine you need to verify someone's identity by comparing their photo to a database, but the rules say nobody — not you, not the database owner, not the network operator — is allowed to actually look at the photo or the stored templates. That's the problem GhostFaceMPC solves: running the entire face-recognition pipeline inside a cryptographic black box where inputs, intermediate values, and outputs are secret-shared among multiple parties. The committed claim: this is the first system to evaluate a full deep convolutional neural network (GhostFaceNet) for face feature extraction AND template matching entirely under secure multi-party computation. Prior work either offloaded the heavy CNN to a trusted party, used weaker models, or only encrypted the matching stage. GhostFaceMPC encrypts the whole chain — image in, yes/no out — with no party ever seeing raw pixels or embeddings. The architecture family is garbled circuits plus secret sharing (the classic 2PC/3PC MPC stack), not homomorphic encryption. The core engineering contribution is an MPC-friendly quantization of GhostFaceNet — replacing floating-point operations with fixed-point arithmetic that survives the precision loss introduced by secret sharing. Circuit-level optimizations (reducing the depth and gate count of nonlinear activations like batch normalization and PReLU) are what make the system tractable rather than a theoretical curiosity. The ladder question is where honesty matters. The abstract claims practicality but the paper is light on concrete latency or throughput numbers in the abstract itself. We don't get a direct wall-clock comparison against plaintext GhostFaceNet or against prior MPC-based biometric systems like CrypTFlow2 or MOTION. The quantized model's recognition accuracy relative to the unquantized baseline is the critical number — how much face-matching quality do you trade for privacy? The abstract doesn't say. Integrity is mixed. Code is released (strong signal), and the system is built on a real, published face-recognition model (GhostFaceNet) rather than a toy network. But the validation regime — which benchmarks, what recognition accuracy, what computational overhead — is not stated in the abstract. The choice of GhostFaceNet (a lightweight architecture) rather than a heavier model like ArcFace-R100 could be pragmatic or could be cherry-picking the easiest CNN to fit inside MPC circuits. The milestone to track: MPC-based face recognition becomes genuinely deployable when end-to-end latency drops below ~1 second per verification on commodity hardware with recognition accuracy within 1-2% of plaintext baselines. We're likely well above that today — garbled-circuit evaluation of even lightweight CNNs typically runs in tens of seconds to minutes. The gap between 'works in principle' and 'works at airport speed' is the real story. The obvious experiment not run: evaluating a larger, higher-accuracy backbone (ArcFace-R100, AdaFace) under the same MPC framework. The honest read is (a) — compute and circuit complexity likely made it infeasible for this paper. A heavier backbone would blow up the garbled-circuit size, but it's the experiment that would prove generality.
