Supplementary Material for: Matching Without Exposure: Cancelable Finger-Knuckle-Print Biometrics with Standardized Authenticated Encryption for Privacy-Preserving Smart-Metering Billing

Supplementary material for the paper "Matching Without Exposure: Cancelable Finger-Knuckle-Print Biometrics with Standardized Authenticated Encryption for Privacy-Preserving Smart-Metering Billing" (submitted to IEEE Transactions on Information Forensics and Security). The archive contains: (1) two ProVerif models formally verifying the billing protocol (injective mutual authentication, template and master-key secrecy, and a precisely scoped forward-security guarantee); (2) Python scripts regenerating the result figures; (3) the core pipeline modules (PCANet feature extraction, token-parameterized cancelable transform, cross-session evaluation driver, Ascon-AEAD128/Ascon-Hash256 reference implementation per NIST SP 800-232, and the 3-message billing protocol) together with the aggregated score/result files of the reported run (legitimate EER = 0.77%, stolen-token EER = 3.90%, rank-1 = 98.66%, D_sys = 0.066). No biometric images, raw descriptors, or invertible representations are included. The PolyU FKP database is not redistributed; it must be obtained from the Hong Kong Polytechnic University. See README.md for the full inventory and reproduction instructions.