Computing Differential Privacy Guarantees for Heterogeneous Compositions Using FFT
Not on the map. Why?
Abstract (arXiv)
The recently proposed Fast Fourier Transform (FFT)-based accountant for evaluating (varepsilon,δ)-differential privacy guarantees using the privacy loss distribution formalism has been shown to give tighter bounds than commonly used methods such as R'enyi accountants when applied to homogeneous compositions, i.e., to compositions of identical mechanisms. In this paper, we extend this approach to heterogeneous compositions. We carry out a full error analysis that allows choosing the parameters of the algorithm such that a desired accuracy is obtained. The analysis also extends previous results by taking into account all the parameters of the algorithm. Using the error analysis, we also give a bound for the computational complexity in terms of the error which is analogous to and slightly tightens the one given by Murtagh and Vadhan (2018). We also show how to speed up the evaluation of tight privacy guarantees using the Plancherel theorem at the cost of increased pre-computation and memory usage.
Key facts. Cited by 20 papers in the map (data through 7 Oct 2026). Builds on 12 of its 34 references that are in the map. First posted on arXiv 24 Feb 2021.
Builds on
12 of 34 references.
References · 12
- 2019Advances and Open Problems in Federated Learningcited by 3,021
- 2016Deep Learning with Differential Privacycited by 2,682
- 2017Renyi Differential Privacycited by 643
- 2018Privacy Amplification by Subsampling: Tight Analyses via Couplings and Divergencescited by 237
- 2018Subsampled R'enyi Differential Privacy and Analytical Moments Accountantcited by 234
- 2019R'enyi Differential Privacy of the Sampled Gaussian Mechanismcited by 199
- 2018cpSGD: Communication-efficient and differentially-private distributed SGDcited by 157
- 2020The Discrete Gaussian for Differential Privacycited by 134
- 2019Deep Learning with Gaussian Differential Privacycited by 112
- 2020Tight Differential Privacy for Discrete-Valued Mechanisms and for the Subsampled Gaussian Mechanism Using FFTcited by 43
- 2020A Better Bound Gives a Hundred Rounds: Enhanced Privacy Guarantees via f-Divergencescited by 21
- 2020Shuffled Model of Federated Learning: Privacy, Communication and Accuracy Trade-offscited by 15
Built on by
Citing papers per year: 2021: 4; 2022: 5; 2023: 3; 2024: 3; 2025: 3; 2026: 2.
20 papers.
Sort:
- 2021Numerical Composition of Differential Privacycited by 174
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 83
- 2022Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributionscited by 50
- 2023Privacy-Preserving In-Context Learning for Large Language Modelscited by 50
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2024Private Fine-tuning of Large Language Models with Zeroth-order Optimizationcited by 41
- 2022Individual Privacy Accounting with Gaussian Differential Privacycited by 19
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuationcited by 19
- 2022Faster Privacy Accounting via Evolving Discretizationcited by 14
- 2023A Randomized Approach for Tight Privacy Accountingcited by 11
- 2025Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learningcited by 6
- 2021Tight Accounting in the Shuffle Model of Differential Privacycited by 5
8 more
- 2022The Saddle-Point Accountant for Differential Privacycited by 5
- 2026Efficient privacy loss accounting for subsampling and random allocationcited by 3
- 2021Learning Numeric Optimal Differentially Private Truncated Additive Mechanismscited by 2
- 2024Closed-Form Bounds for DP-SGD against Record-level Inferencecited by 2
- 2025PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectorscited by 1
- 2024Weights Shuffling for Improving DPSGD in Transformer-based Modelscited by 0
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)cited by 0
- 2026Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacycited by 0
- 2026Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy20 May 2026
- 2026Efficient privacy loss accounting for subsampling and random allocation19 Feb 2026
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectors14 Mar 2025
- 2025Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning13 Mar 2025
- 2024Weights Shuffling for Improving DPSGD in Transformer-based Models22 Jul 2024
- 2024Closed-Form Bounds for DP-SGD against Record-level Inference22 Feb 2024
- 2024Private Fine-tuning of Large Language Models with Zeroth-order Optimization9 Jan 2024
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuation30 Aug 2023
- 2023Privacy-Preserving In-Context Learning for Large Language Models2 May 2023
- 2023A Randomized Approach for Tight Privacy Accounting17 Apr 2023
- 2022Composition of Differential Privacy & Privacy Amplification by Subsampling2 Oct 2022
8 more
- 2022Individual Privacy Accounting with Gaussian Differential Privacy30 Sep 2022
- 2022The Saddle-Point Accountant for Differential Privacy20 Aug 2022
- 2022Faster Privacy Accounting via Evolving Discretization10 Jul 2022
- 2022Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributions10 Jul 2022
- 2021Learning Numeric Optimal Differentially Private Truncated Additive Mechanisms27 Jul 2021
- 2021Optimal Accounting of Differential Privacy via Characteristic Function16 Jun 2021
- 2021Numerical Composition of Differential Privacy5 Jun 2021
- 2021Tight Accounting in the Shuffle Model of Differential Privacy1 Jun 2021
- 2021Numerical Composition of Differential Privacycited by 174
- 2021Optimal Accounting of Differential Privacy via Characteristic Functioncited by 83
- 2022Connect the Dots: Tighter Discrete Approximations of Privacy Loss Distributionscited by 50
- 2023Privacy-Preserving In-Context Learning for Large Language Modelscited by 50
- 2022Composition of Differential Privacy & Privacy Amplification by Subsamplingcited by 42
- 2024Private Fine-tuning of Large Language Models with Zeroth-order Optimizationcited by 41
- 2022Individual Privacy Accounting with Gaussian Differential Privacycited by 19
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuationcited by 19
- 2022Faster Privacy Accounting via Evolving Discretizationcited by 14
- 2023A Randomized Approach for Tight Privacy Accountingcited by 11
- 2025Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learningcited by 6
- 2021Tight Accounting in the Shuffle Model of Differential Privacycited by 5
12 most cited of 20 All 20 (JSON)
- 2026Provable Robustness against Backdoor Attacks via the Primal-Dual Perspective on Differential Privacy20 May 2026
- 2026Efficient privacy loss accounting for subsampling and random allocation19 Feb 2026
- 2025Towards Reliable and Generalizable Differentially Private Machine Learning (Extended Version)21 Aug 2025
- 2025PREAMBLE: Private and Efficient Aggregation via Block Sparse Vectors14 Mar 2025
- 2025Gaussian DP for Reporting Differential Privacy Guarantees in Machine Learning13 Mar 2025
- 2024Weights Shuffling for Improving DPSGD in Transformer-based Models22 Jul 2024
- 2024Closed-Form Bounds for DP-SGD against Record-level Inference22 Feb 2024
- 2024Private Fine-tuning of Large Language Models with Zeroth-order Optimization9 Jan 2024
- 2023Threshold KNN-Shapley: A Linear-Time and Privacy-Friendly Approach to Data Valuation30 Aug 2023
- 2023Privacy-Preserving In-Context Learning for Large Language Models2 May 2023
- 2023A Randomized Approach for Tight Privacy Accounting17 Apr 2023
- 2022Composition of Differential Privacy & Privacy Amplification by Subsampling2 Oct 2022
12 newest of 20 All 20 (JSON)