Chameleon: A Hybrid Secure Computation Framework for Machine Learning Applications
Not on the map. Why?
Abstract (arXiv)
We present Chameleon, a novel hybrid (mixed-protocol) framework for secure function evaluation (SFE) which enables two parties to jointly compute a function without disclosing their private inputs. Chameleon combines the best aspects of generic SFE protocols with the ones that are based upon additive secret sharing. In particular, the framework performs linear operations in the ring mathbbZ2l using additively secret shared values and nonlinear operations using Yao's Garbled Circuits or the Goldreich-Micali-Wigderson protocol. Chameleon departs from the common assumption of additive or linear secret sharing models where three or more parties need to communicate in the online phase: the framework allows two parties with private inputs to communicate in the online phase under the assumption of a third node generating correlated randomness in an offline phase. Almost all of the heavy cryptographic operations are precomputed in an offline phase which substantially reduces the communication overhead. Chameleon is both scalable and significantly more efficient than the ABY framework (NDSS'15) it is based on. Our framework supports signed fixed-point numbers. In particular, Chameleon's vector dot product of signed fixed-point numbers improves the efficiency of mining and classification of encrypted data for algorithms based upon heavy matrix multiplications. Our evaluation of Chameleon on a 5 layer convolutional deep neural network shows 133x and 4.2x faster executions than Microsoft CryptoNets (ICML'16) and MiniONN (CCS'17), respectively.
Key facts. Cited by 67 papers in the map (data through 7 Oct 2026). First posted on arXiv 10 Jan 2018.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 20; 2022: 10; 2023: 12; 2024: 12; 2025: 8; 2026: 5.
67 papers.
Sort:
By area:
- 2021CrypTen: Secure Multi-Party Computation Meets Machine Learningcited by 131
- 2022MPCFormer: fast, performant and private Transformer inference with MPCcited by 67
- 2021Privacy-Preserving Machine Learning: Methods, Challenges and Directionscited by 58
- 2021CryptGPU: Fast Privacy-Preserving Machine Learning on the GPUcited by 46
- 2021SIRNN: A Math Library for Secure RNN Inferencecited by 28
- 2023A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacycited by 24
- 2021LegoDNN: Block-grained Scaling of Deep Neural Networks for Mobile Visioncited by 20
- 2021Secure Quantized Training for Deep Learningcited by 15
- 2021Sisyphus: A Cautionary Tale of Using Low-Degree Polynomial Activations in Privacy-Preserving Deep Learningcited by 14
- 2021Privacy-Preserving Feature Selection with Secure Multiparty Computationcited by 12
- 2022Autonomy and Intelligence in the Computing Continuum: Challenges, Enablers, and Future Directions for Orchestrationcited by 12
- 2024TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deploymentcited by 11
38 more
- 2021Privacy-Preserving Video Classification with Convolutional Neural Networkscited by 10
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directionscited by 10
- 2021PRICURE: Privacy-Preserving Collaborative Inference in a Multi-Party Settingcited by 9
- 2022SecureFedYJ: a safe feature Gaussianization protocol for Federated Learningcited by 9
- 2023East: Efficient and Accurate Secure Transformer Framework for Inferencecited by 9
- 2021Tetrad: Actively Secure 4PC for Secure Training and Inferencecited by 8
- 2022Deploying Convolutional Networks on Untrusted Platforms Using 2D Holographic Reduced Representationscited by 7
- 2021SAFELearning: Enable Backdoor Detectability In Federated Learning With Secure Aggregationcited by 5
- 2021Towards Secure and Practical Machine Learning via Secret Sharing and Random Permutationcited by 5
- 2022Volley Revolver: A Novel Matrix-Encoding Method for Privacy-Preserving Neural Networks (Inference)cited by 5
- 2023QuMoS: A Framework for Preserving Security of Quantum Machine Learning Modelcited by 5
- 2023Training Large Scale Polynomial CNNs for E2E Inference over Homomorphic Encryptioncited by 5
- 2023Attesting Distributional Properties of Training Data for Machine Learningcited by 5
- 2024PristiQ: A Co-Design Framework for Preserving Data Security of Quantum Learning in the Cloudcited by 5
- 2024State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Surveycited by 5
- 2024MPC-Minimized Secure LLM Inferencecited by 5
- 2021Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Surveycited by 4
- 2021Adam in Private: Secure and Fast Training of Deep Neural Networks with Adaptive Moment Estimationcited by 4
- 2022SCOTCH: An Efficient Secure Computation Framework for Secure Aggregationcited by 4
- 2022Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanismscited by 4
- 2022MPC-Pipe: an Efficient Pipeline Scheme for Secure Multi-party Machine Learning Inferencecited by 4
- 2021Reducing ReLU Count for Privacy-Preserving CNN Speedupcited by 3
- 2025Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsitycited by 3
- 2021Fast Privacy-Preserving Text Classification based on Secure Multiparty Computationcited by 2
- 2023Dash: Accelerating Distributed Private Convolutional Neural Network Inference with Arithmetic Garbled Circuitscited by 2
- 2023WW-FL: Secure and Private Large-Scale Federated Learningcited by 2
- 2023Approximating ReLU on a Reduced Ring for Efficient MPC-based Private Inferencecited by 2
- 2026AgenTEE: Confidential LLM Agent Execution on Edge Devicescited by 2
- 2026Spruce: Scalable Private Outsourced Retrieval Using Compact Embeddingscited by 2
- 2021S++: A Fast and Deployable Secure-Computation Framework for Privacy-Preserving Neural Network Trainingcited by 1
- 2021Efficient Encrypted Inference on Ensembles of Decision Treescited by 1
- 2022MPClan: Protocol Suite for Privacy-Conscious Computationscited by 1
- 2023Securing Neural Networks with Knapsack Optimizationcited by 1
- 2023Compact: Approximating Complex Activation Functions for Secure Computationcited by 1
- 2023Privacy Preserving Multi-Agent Reinforcement Learning in Supply Chainscited by 1
- 2024Pencil: Private and Extensible Collaborative Learning without the Non-Colluding Assumptioncited by 1
- 2024VeriSplit: Secure and Practical Offloading of Machine Learning Inferences across IoT Devicescited by 1
- 2024Privacy-Preserving Hierarchical Model-Distributed Inferencecited by 1
50 most cited of 67 All 67 (JSON)
- 2026Spruce: Scalable Private Outsourced Retrieval Using Compact Embeddings3 Sep 2026
- 2026AgenTEE: Confidential LLM Agent Execution on Edge Devices20 Apr 2026
- 2026SecureRouter: Encrypted Routing for Efficient Secure Inference16 Apr 2026
- 2026NanoZK: Privacy-Preserving Verifiable Inference for Large Language Models via Layerwise Zero-Knowledge Proofs17 Mar 2026
- 2026SecMoE: Communication-Efficient Secure MoE Inference via Select-Then-Compute11 Jan 2026
- 2025DeepShare: Sharing ReLU Across Channels and Layers for Efficient Private Inference19 Dec 2025
- 2025CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computation24 Nov 2025
- 2025Optimizing Privacy-Preserving Primitives to Support LLM-Scale Applications29 Sep 2025
- 2025CryptGNN: Enabling Secure Inference for Graph Neural Networks11 Sep 2025
- 2025Efficient and Verifiable Privacy-Preserving Convolutional Computation for CNN Inference with Untrusted Clouds18 Aug 2025
- 2025DESIGN: Encrypted GNN Inference via Server-Side Input Graph Pruning8 Jul 2025
- 2025SecP-Tuning: Efficient Privacy-Preserving Prompt Tuning for Large Language Models via MPC18 Jun 2025
38 more
- 2025Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsity12 May 2025
- 2024CBNN: 3-Party Secure Framework for Customized Binary Neural Networks Inference21 Dec 2024
- 2024PrivQuant: Communication-Efficient Private Inference with Quantized Network/Protocol Co-Optimization12 Oct 2024
- 2024MPC-Minimized Secure LLM Inference7 Aug 2024
- 2024Privacy-Preserving Hierarchical Model-Distributed Inference25 Jul 2024
- 2024Privacy-Preserving and Trustworthy Deep Learning for Medical Imaging29 Jun 2024
- 2024A Survey on Intelligent Internet of Things: Applications, Security, Privacy, and Future Directions6 Jun 2024
- 2024VeriSplit: Secure and Practical Offloading of Machine Learning Inferences across IoT Devices2 Jun 2024
- 2024PristiQ: A Co-Design Framework for Preserving Data Security of Quantum Learning in the Cloud20 Apr 2024
- 2024TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment17 Apr 2024
- 2024Hawk: Accurate and Fast Privacy-Preserving Machine Learning Using Secure Lookup Table Computation26 Mar 2024
- 2024Pencil: Private and Extensible Collaborative Learning without the Non-Colluding Assumption17 Mar 2024
- 2024State-of-the-Art Approaches to Enhancing Privacy Preservation of Machine Learning Datasets: A Survey25 Feb 2024
- 2023Privacy Preserving Multi-Agent Reinforcement Learning in Supply Chains9 Dec 2023
- 2023Approximating ReLU on a Reduced Ring for Efficient MPC-based Private Inference9 Sep 2023
- 2023Compact: Approximating Complex Activation Functions for Secure Computation9 Sep 2023
- 2023East: Efficient and Accurate Secure Transformer Framework for Inference19 Aug 2023
- 2023Attesting Distributional Properties of Training Data for Machine Learning18 Aug 2023
- 2023Integrating Homomorphic Encryption and Trusted Execution Technology for Autonomous and Confidential Model Refining in Cloud2 Aug 2023
- 2023Training Large Scale Polynomial CNNs for E2E Inference over Homomorphic Encryption26 Apr 2023
- 2023QuMoS: A Framework for Preserving Security of Quantum Machine Learning Model23 Apr 2023
- 2023Securing Neural Networks with Knapsack Optimization20 Apr 2023
- 2023A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacy21 Feb 2023
- 2023WW-FL: Secure and Private Large-Scale Federated Learning20 Feb 2023
- 2023Dash: Accelerating Distributed Private Convolutional Neural Network Inference with Arithmetic Garbled Circuits13 Feb 2023
- 2022MPCFormer: fast, performant and private Transformer inference with MPC2 Nov 2022
- 2022SecureFedYJ: a safe feature Gaussianization protocol for Federated Learning4 Oct 2022
- 2022MPC-Pipe: an Efficient Pipeline Scheme for Secure Multi-party Machine Learning Inference27 Sep 2022
- 2022Federated and Transfer Learning: A Survey on Adversaries and Defense Mechanisms5 Jul 2022
- 2022MPClan: Protocol Suite for Privacy-Conscious Computations24 Jun 2022
- 2022Deploying Convolutional Networks on Untrusted Platforms Using 2D Holographic Reduced Representations13 Jun 2022
- 2022Autonomy and Intelligence in the Computing Continuum: Challenges, Enablers, and Future Directions for Orchestration3 May 2022
- 2022ABG: A Multi-Party Mixed Protocol Framework for Privacy-Preserving Cooperative Learning7 Feb 2022
- 2022Volley Revolver: A Novel Matrix-Encoding Method for Privacy-Preserving Neural Networks (Inference)29 Jan 2022
- 2022SCOTCH: An Efficient Secure Computation Framework for Secure Aggregation19 Jan 2022
- 2021LegoDNN: Block-grained Scaling of Deep Neural Networks for Mobile Vision18 Dec 2021
- 2021CrypTen: Secure Multi-Party Computation Meets Machine Learning2 Sep 2021
- 2021Order Optimal Bounds for One-Shot Federated Learning over non-Convex Loss Functions19 Aug 2021
50 newest of 67 All 67 (JSON)
- 2026AgenTEE: Confidential LLM Agent Execution on Edge Devices20 Apr 2026
- 2021CrypTen: Secure Multi-Party Computation Meets Machine Learningcited by 131
- 2022MPCFormer: fast, performant and private Transformer inference with MPCcited by 67
- 2021Privacy-Preserving Machine Learning: Methods, Challenges and Directionscited by 58
- 2021CryptGPU: Fast Privacy-Preserving Machine Learning on the GPUcited by 46
- 2021SIRNN: A Math Library for Secure RNN Inferencecited by 28
- 2023A Survey of Trustworthy Federated Learning with Perspectives on Security, Robustness, and Privacycited by 24
- 2021LegoDNN: Block-grained Scaling of Deep Neural Networks for Mobile Visioncited by 20
- 2021Secure Quantized Training for Deep Learningcited by 15
- 2021Sisyphus: A Cautionary Tale of Using Low-Degree Polynomial Activations in Privacy-Preserving Deep Learningcited by 14
- 2021Privacy-Preserving Feature Selection with Secure Multiparty Computationcited by 12
- 2022Autonomy and Intelligence in the Computing Continuum: Challenges, Enablers, and Future Directions for Orchestrationcited by 12
- 2024TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deploymentcited by 11
12 most cited of 63 All 63 (JSON)
- 2026SecureRouter: Encrypted Routing for Efficient Secure Inference16 Apr 2026
- 2026NanoZK: Privacy-Preserving Verifiable Inference for Large Language Models via Layerwise Zero-Knowledge Proofs17 Mar 2026
- 2025DeepShare: Sharing ReLU Across Channels and Layers for Efficient Private Inference19 Dec 2025
- 2025CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computation24 Nov 2025
- 2025Optimizing Privacy-Preserving Primitives to Support LLM-Scale Applications29 Sep 2025
- 2025CryptGNN: Enabling Secure Inference for Graph Neural Networks11 Sep 2025
- 2025Efficient and Verifiable Privacy-Preserving Convolutional Computation for CNN Inference with Untrusted Clouds18 Aug 2025
- 2025DESIGN: Encrypted GNN Inference via Server-Side Input Graph Pruning8 Jul 2025
- 2025SecP-Tuning: Efficient Privacy-Preserving Prompt Tuning for Large Language Models via MPC18 Jun 2025
- 2025Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsity12 May 2025
- 2024CBNN: 3-Party Secure Framework for Customized Binary Neural Networks Inference21 Dec 2024
- 2024PrivQuant: Communication-Efficient Private Inference with Quantized Network/Protocol Co-Optimization12 Oct 2024
12 newest of 63 All 63 (JSON)