Glyph: Fast and Accurately Training Deep Neural Networks on Encrypted Data
Not on the map. Why?
Abstract (arXiv)
Big data is one of the cornerstones to enabling and training deep neural networks (DNNs). Because of the lack of expertise, to gain benefits from their data, average users have to rely on and upload their private data to big data companies they may not trust. Due to the compliance, legal, or privacy constraints, most users are willing to contribute only their encrypted data, and lack interests or resources to join the training of DNNs in cloud. To train a DNN on encrypted data in a completely non-interactive way, a recent work proposes a fully homomorphic encryption (FHE)-based technique implementing all activations in the neural network by textitBrakerski-Gentry-Vaikuntanathan (BGV)-based lookup tables. However, such inefficient lookup-table-based activations significantly prolong the training latency of privacy-preserving DNNs. In this paper, we propose, Glyph, a FHE-based scheme to fast and accurately train DNNs on encrypted data by switching between TFHE (Fast Fully Homomorphic Encryption over the Torus) and BGV cryptosystems. Glyph uses logic-operation-friendly TFHE to implement nonlinear activations, while adopts vectorial-arithmetic-friendly BGV to perform multiply-accumulation (MAC) operations. Glyph further applies transfer learning on the training of DNNs to improve the test accuracy and reduce the number of MAC operations between ciphertext and ciphertext in convolutional layers. Our experimental results show Glyph obtains the state-of-the-art test accuracy, but reduces the training latency by 99% over the prior FHE-based technique on various encrypted datasets.
Key facts. Cited by 28 papers in the map (data through 7 Oct 2026). First posted on arXiv 16 Nov 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 6; 2022: 2; 2023: 3; 2024: 6; 2025: 8; 2026: 3.
28 papers.
Sort:
By area:
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 88
- 2021Differential Privacy for Text Analytics via Natural Text Sanitizationcited by 74
- 2021Privacy-Preserving Machine Learning: Methods, Challenges and Directionscited by 58
- 2021SIRNN: A Math Library for Secure RNN Inferencecited by 28
- 2021Secure Quantized Training for Deep Learningcited by 15
- 2021A methodology for training homomorphicencryption friendly neural networkscited by 10
- 2025CipherPrune: Efficient and Scalable Private Transformer Inferencecited by 9
- 2024GuardML: Efficient Privacy-Preserving Machine Learning Services Through Hybrid Homomorphic Encryptioncited by 7
- 2025Private LoRA Fine-tuning of Open-Source LLMs with Homomorphic Encryptioncited by 5
- 2021Adam in Private: Secure and Fast Training of Deep Neural Networks with Adaptive Moment Estimationcited by 4
- 2025TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generationcited by 4
- 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
16 more
- 2025RewardDS: Privacy-Preserving Fine-Tuning for Large Language Models via Reward Driven Data Synthesiscited by 3
- 2024MedBlindTuner: Towards Privacy-preserving Fine-tuning on Biomedical Images with Transformers and Fully Homomorphic Encryptioncited by 2
- 2024Neural Network Training on Encrypted Data with TFHEcited by 2
- 2025ReBoot: Encrypted Training of Deep Neural Networks with CKKS Bootstrappingcited by 1
- 2025SoK: Data Minimization in Machine Learningcited by 1
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradientscited by 1
- 2022Protecting Data from all Parties: Combining FHE and DP in Federated Learningcited by 0
- 2023Data Privacy with Homomorphic Encryption in Neural Networks Training and Inferencecited by 0
- 2023SABLE: Secure And Byzantine robust LEarningcited by 0
- 2023Practical, Private Assurance of the Value of Collaboration via Fully Homomorphic Encryptioncited by 0
- 2024I can't see it but I can Fine-tune it: On Encrypted Fine-tuning of Transformers using Fully Homomorphic Encryptioncited by 0
- 2024Homomorphic WiSARDs: Efficient Weightless Neural Network training over encrypted datacited by 0
- 2025Functional Encryption in Secure Neural Network Training: Data Leakage and Practical Mitigationscited by 0
- 2026Continual Pretraining on Encrypted Synthetic Data for Privacy-Preserving LLMscited by 0
- 2026Detecting and Understanding Vulnerabilities in Fully Homomorphic Encryption Frameworkscited by 0
- 2026Beyond Classification: Task-Dependent Learnability under Privacy-Motivated Image Transformationscited by 0
- 2026Beyond Classification: Task-Dependent Learnability under Privacy-Motivated Image Transformations27 Aug 2026
- 2026Detecting and Understanding Vulnerabilities in Fully Homomorphic Encryption Frameworks21 Jun 2026
- 2026Continual Pretraining on Encrypted Synthetic Data for Privacy-Preserving LLMs9 Jan 2026
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Functional Encryption in Secure Neural Network Training: Data Leakage and Practical Mitigations25 Sep 2025
- 2025SoK: Data Minimization in Machine Learning14 Aug 2025
- 2025ReBoot: Encrypted Training of Deep Neural Networks with CKKS Bootstrapping24 Jun 2025
- 2025Private LoRA Fine-tuning of Open-Source LLMs with Homomorphic Encryption12 May 2025
- 2025TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generation15 Mar 2025
- 2025CipherPrune: Efficient and Scalable Private Transformer Inference24 Feb 2025
- 2025RewardDS: Privacy-Preserving Fine-Tuning for Large Language Models via Reward Driven Data Synthesis23 Feb 2025
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
16 more
- 2024Homomorphic WiSARDs: Efficient Weightless Neural Network training over encrypted data29 Mar 2024
- 2024I can't see it but I can Fine-tune it: On Encrypted Fine-tuning of Transformers using Fully Homomorphic Encryption14 Feb 2024
- 2024Neural Network Training on Encrypted Data with TFHE29 Jan 2024
- 2024GuardML: Efficient Privacy-Preserving Machine Learning Services Through Hybrid Homomorphic Encryption26 Jan 2024
- 2024MedBlindTuner: Towards Privacy-preserving Fine-tuning on Biomedical Images with Transformers and Fully Homomorphic Encryption17 Jan 2024
- 2023Practical, Private Assurance of the Value of Collaboration via Fully Homomorphic Encryption4 Oct 2023
- 2023SABLE: Secure And Byzantine robust LEarning11 Sep 2023
- 2023Data Privacy with Homomorphic Encryption in Neural Networks Training and Inference3 May 2023
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trends16 May 2022
- 2022Protecting Data from all Parties: Combining FHE and DP in Federated Learning9 May 2022
- 2021A methodology for training homomorphicencryption friendly neural networks5 Nov 2021
- 2021Privacy-Preserving Machine Learning: Methods, Challenges and Directions10 Aug 2021
- 2021Secure Quantized Training for Deep Learning1 Jul 2021
- 2021Adam in Private: Secure and Fast Training of Deep Neural Networks with Adaptive Moment Estimation4 Jun 2021
- 2021Differential Privacy for Text Analytics via Natural Text Sanitization2 Jun 2021
- 2021SIRNN: A Math Library for Secure RNN Inference10 May 2021
- 2022Trustworthy Graph Neural Networks: Aspects, Methods and Trendscited by 88
- 2021Differential Privacy for Text Analytics via Natural Text Sanitizationcited by 74
- 2021Privacy-Preserving Machine Learning: Methods, Challenges and Directionscited by 58
- 2021SIRNN: A Math Library for Secure RNN Inferencecited by 28
- 2021Secure Quantized Training for Deep Learningcited by 15
- 2021A methodology for training homomorphicencryption friendly neural networkscited by 10
- 2025CipherPrune: Efficient and Scalable Private Transformer Inferencecited by 9
- 2024GuardML: Efficient Privacy-Preserving Machine Learning Services Through Hybrid Homomorphic Encryptioncited by 7
- 2025Private LoRA Fine-tuning of Open-Source LLMs with Homomorphic Encryptioncited by 5
- 2021Adam in Private: Secure and Fast Training of Deep Neural Networks with Adaptive Moment Estimationcited by 4
- 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
- 2024MedBlindTuner: Towards Privacy-preserving Fine-tuning on Biomedical Images with Transformers and Fully Homomorphic Encryptioncited by 2
12 most cited of 25 All 25 (JSON)
- 2026Beyond Classification: Task-Dependent Learnability under Privacy-Motivated Image Transformations27 Aug 2026
- 2026Detecting and Understanding Vulnerabilities in Fully Homomorphic Encryption Frameworks21 Jun 2026
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Functional Encryption in Secure Neural Network Training: Data Leakage and Practical Mitigations25 Sep 2025
- 2025SoK: Data Minimization in Machine Learning14 Aug 2025
- 2025ReBoot: Encrypted Training of Deep Neural Networks with CKKS Bootstrapping24 Jun 2025
- 2025Private LoRA Fine-tuning of Open-Source LLMs with Homomorphic Encryption12 May 2025
- 2025CipherPrune: Efficient and Scalable Private Transformer Inference24 Feb 2025
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
- 2024Homomorphic WiSARDs: Efficient Weightless Neural Network training over encrypted data29 Mar 2024
- 2024I can't see it but I can Fine-tune it: On Encrypted Fine-tuning of Transformers using Fully Homomorphic Encryption14 Feb 2024
- 2024Neural Network Training on Encrypted Data with TFHE29 Jan 2024
12 newest of 25 All 25 (JSON)