SHE: A Fast and Accurate Deep Neural Network for Encrypted Data
Not on the map. Why?
Abstract (arXiv)
Homomorphic Encryption (HE) is one of the most promising security solutions to emerging Machine Learning as a Service (MLaaS). Leveled-HE (LHE)-enabled Convolutional Neural Networks (LHECNNs) are proposed to implement MLaaS to avoid large bootstrapping overhead. However, prior LHECNNs have to pay significant computing overhead but achieve only low inference accuracy, due to their polynomial approximation activations and poolings. Stacking many polynomial approximation activation layers in a network greatly reduces inference accuracy, since the polynomial approximation activation errors lead to a low distortion of the output distribution of the next batch normalization layer. So the polynomial approximation activations and poolings have become the obstacle to a fast and accurate LHECNN model. In this paper, we propose a Shift-accumulation-based LHE-enabled deep neural network (SHE) for fast and accurate inferences on encrypted data. We use the binary-operation-friendly Leveled Fast Homomorphic Encryption over Torus (LTFHE) encryption scheme to implement ReLU activations and max poolings. We also adopt the logarithmic quantization to accelerate inferences by replacing expensive LTFHE multiplications with cheap LTFHE shifts. We propose a mixed bitwidth accumulator to accelerate accumulations. Since the LTFHE ReLU activations, max poolings, shifts and accumulations have small multiplicative depth overhead, SHE can implement much deeper network architectures with more convolutional and activation layers. Our experimental results show SHE achieves the state-of-the-art inference accuracy and reduces the inference latency by 76.21% ~ 94.23% over prior LHECNNs on MNIST and CIFAR-10. The source code of SHE is available at https://github.com/qianlou/SHE.
Key facts. Cited by 36 papers in the map (data through 7 Oct 2026). First posted on arXiv 1 Jun 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 3; 2022: 6; 2023: 8; 2024: 11; 2025: 6; 2026: 2.
36 papers.
Sort:
By area:
- 2021Privacy-Preserving Machine Learning with Fully Homomorphic Encryption for Deep Neural Networkcited by 57
- 2023Deep Neural Networks for Encrypted Inference with TFHEcited by 11
- 2023A2Q: Accumulator-Aware Quantization with Guaranteed Overflow Avoidancecited by 11
- 2022CryptoGCN: Fast and Scalable Homomorphically Encrypted Graph Convolutional Network Inferencecited by 10
- 2023HyPHEN: A Hybrid Packing Method and Optimizations for Homomorphic Encryption-Based Neural Networkscited by 9
- 2025CipherPrune: Efficient and Scalable Private Transformer Inferencecited by 9
- 2022FedVLN: Privacy-preserving Federated Vision-and-Language Navigationcited by 8
- 2022Hiding Visual Information via Obfuscating Adversarial Perturbationscited by 7
- 2024PrivCirNet: Efficient Private Inference via Block Circulant Transformationcited by 7
- 2022Private and Reliable Neural Network Inferencecited by 6
- 2024A2Q+: Improving Accumulator-Aware Weight Quantizationcited by 5
- 2022RL-DistPrivacy: Privacy-Aware Distributed Deep Inference for low latency IoT systemscited by 4
24 more
- 2023TT-TFHE: a Torus Fully Homomorphic Encryption-Friendly Neural Network Architecturecited by 4
- 2023Optimized Layerwise Approximation for Efficient Private Inference on Fully Homomorphic Encryptioncited by 4
- 2024Accumulator-Aware Post-Training Quantization for Large Language Modelscited by 4
- 2025TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generationcited by 4
- 2023Quantized Neural Networks for Low-Precision Accumulation with Guaranteed Overflow Avoidancecited by 3
- 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
- 2021SoK: Privacy-preserving Deep Learning with Homomorphic Encryptioncited by 2
- 2023Inhibitor Transformers and Gated RNNs for Torus Efficient Fully Homomorphic Encryptioncited by 2
- 2024From Algorithm to Hardware: A Survey on Efficient and Safe Deployment of Deep Neural Networkscited by 2
- 2025Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Acceleratorscited by 2
- 2021Efficient CNN Building Blocks for Encrypted Datacited by 1
- 2024Bi-CryptoNets: Leveraging Different-Level Privacy for Encrypted Inferencecited by 1
- 2024DCT-CryptoNets: Scaling Private Inference in the Frequency Domaincited by 1
- 2024SoK: Towards Security and Safety of Edge AIcited by 1
- 2025Privacy-Preserving Chest X-ray Classification in Latent Space with Homomorphically Encrypted Neural Inferencecited by 1
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradientscited by 1
- 2022On the Evaluation of User Privacy in Deep Neural Networks using Timing Side Channelcited by 0
- 2023The Inhibitor: ReLU and Addition-Based Attention for Efficient Transformers under Fully Homomorphic Encryption on the Toruscited by 0
- 2024Homomorphic WiSARDs: Efficient Weightless Neural Network training over encrypted datacited by 0
- 2024Privacy-Preserving and Trustworthy Deep Learning for Medical Imagingcited by 0
- 2024Attack GAN (AGAN ): A new Security Evaluation Tool for Perceptual Encryptioncited by 0
- 2025SecPE: Secure Prompt Ensembling for Private and Robust Large Language Modelscited by 0
- 2026RobPI: Robust Private Inference against Malicious Clientcited by 0
- 2026EI-DDLGN: Efficient Encrypted Inference with Deep Differentiable Logic Gate Networks under TFHEcited by 0
- 2026EI-DDLGN: Efficient Encrypted Inference with Deep Differentiable Logic Gate Networks under TFHE12 Sep 2026
- 2026RobPI: Robust Private Inference against Malicious Client23 Feb 2026
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Accelerators4 Jul 2025
- 2025Privacy-Preserving Chest X-ray Classification in Latent Space with Homomorphically Encrypted Neural Inference18 Jun 2025
- 2025TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generation15 Mar 2025
- 2025CipherPrune: Efficient and Scalable Private Transformer Inference24 Feb 2025
- 2025SecPE: Secure Prompt Ensembling for Private and Robust Large Language Models2 Feb 2025
- 2024SoK: Towards Security and Safety of Edge AI7 Oct 2024
- 2024Accumulator-Aware Post-Training Quantization for Large Language Models25 Sep 2024
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
- 2024DCT-CryptoNets: Scaling Private Inference in the Frequency Domain27 Aug 2024
24 more
- 2024Attack GAN (AGAN ): A new Security Evaluation Tool for Perceptual Encryption9 Jul 2024
- 2024Privacy-Preserving and Trustworthy Deep Learning for Medical Imaging29 Jun 2024
- 2024PrivCirNet: Efficient Private Inference via Block Circulant Transformation23 May 2024
- 2024From Algorithm to Hardware: A Survey on Efficient and Safe Deployment of Deep Neural Networks9 May 2024
- 2024Homomorphic WiSARDs: Efficient Weightless Neural Network training over encrypted data29 Mar 2024
- 2024Bi-CryptoNets: Leveraging Different-Level Privacy for Encrypted Inference2 Feb 2024
- 2024A2Q+: Improving Accumulator-Aware Weight Quantization19 Jan 2024
- 2023Optimized Layerwise Approximation for Efficient Private Inference on Fully Homomorphic Encryption16 Oct 2023
- 2023The Inhibitor: ReLU and Addition-Based Attention for Efficient Transformers under Fully Homomorphic Encryption on the Torus3 Oct 2023
- 2023A2Q: Accumulator-Aware Quantization with Guaranteed Overflow Avoidance25 Aug 2023
- 2023Inhibitor Transformers and Gated RNNs for Torus Efficient Fully Homomorphic Encryption10 Aug 2023
- 2023Deep Neural Networks for Encrypted Inference with TFHE13 Feb 2023
- 2023HyPHEN: A Hybrid Packing Method and Optimizations for Homomorphic Encryption-Based Neural Networks5 Feb 2023
- 2023TT-TFHE: a Torus Fully Homomorphic Encryption-Friendly Neural Network Architecture3 Feb 2023
- 2023Quantized Neural Networks for Low-Precision Accumulation with Guaranteed Overflow Avoidance31 Jan 2023
- 2022Private and Reliable Neural Network Inference27 Oct 2022
- 2022Hiding Visual Information via Obfuscating Adversarial Perturbations30 Sep 2022
- 2022CryptoGCN: Fast and Scalable Homomorphically Encrypted Graph Convolutional Network Inference24 Sep 2022
- 2022RL-DistPrivacy: Privacy-Aware Distributed Deep Inference for low latency IoT systems27 Aug 2022
- 2022On the Evaluation of User Privacy in Deep Neural Networks using Timing Side Channel1 Aug 2022
- 2022FedVLN: Privacy-preserving Federated Vision-and-Language Navigation28 Mar 2022
- 2021SoK: Privacy-preserving Deep Learning with Homomorphic Encryption23 Dec 2021
- 2021Privacy-Preserving Machine Learning with Fully Homomorphic Encryption for Deep Neural Network14 Jun 2021
- 2021Efficient CNN Building Blocks for Encrypted Data30 Jan 2021
- 2021Privacy-Preserving Machine Learning with Fully Homomorphic Encryption for Deep Neural Networkcited by 57
- 2023Deep Neural Networks for Encrypted Inference with TFHEcited by 11
- 2023A2Q: Accumulator-Aware Quantization with Guaranteed Overflow Avoidancecited by 11
- 2022CryptoGCN: Fast and Scalable Homomorphically Encrypted Graph Convolutional Network Inferencecited by 10
- 2023HyPHEN: A Hybrid Packing Method and Optimizations for Homomorphic Encryption-Based Neural Networkscited by 9
- 2025CipherPrune: Efficient and Scalable Private Transformer Inferencecited by 9
- 2022FedVLN: Privacy-preserving Federated Vision-and-Language Navigationcited by 8
- 2022Hiding Visual Information via Obfuscating Adversarial Perturbationscited by 7
- 2024PrivCirNet: Efficient Private Inference via Block Circulant Transformationcited by 7
- 2022Private and Reliable Neural Network Inferencecited by 6
- 2024A2Q+: Improving Accumulator-Aware Weight Quantizationcited by 5
- 2022RL-DistPrivacy: Privacy-Aware Distributed Deep Inference for low latency IoT systemscited by 4
12 most cited of 35 All 35 (JSON)
- 2026EI-DDLGN: Efficient Encrypted Inference with Deep Differentiable Logic Gate Networks under TFHE12 Sep 2026
- 2026RobPI: Robust Private Inference against Malicious Client23 Feb 2026
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Accelerators4 Jul 2025
- 2025Privacy-Preserving Chest X-ray Classification in Latent Space with Homomorphically Encrypted Neural Inference18 Jun 2025
- 2025CipherPrune: Efficient and Scalable Private Transformer Inference24 Feb 2025
- 2025SecPE: Secure Prompt Ensembling for Private and Robust Large Language Models2 Feb 2025
- 2024SoK: Towards Security and Safety of Edge AI7 Oct 2024
- 2024Accumulator-Aware Post-Training Quantization for Large Language Models25 Sep 2024
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
- 2024DCT-CryptoNets: Scaling Private Inference in the Frequency Domain27 Aug 2024
- 2024Attack GAN (AGAN ): A new Security Evaluation Tool for Perceptual Encryption9 Jul 2024
12 newest of 35 All 35 (JSON)