MPC-Pipe: an Efficient Pipeline Scheme for Secure Multi-party Machine Learning Inference
Not on the map. Why?
Abstract (arXiv)
Multi-party computing (MPC) has been gaining popularity as a secure computing model over the past few years. However, prior works have demonstrated that MPC protocols still pay substantial performance penalties compared to plaintext, particularly when applied to ML algorithms. The overhead is due to added computation and communication costs. Prior studies, as well as our own analysis, found that most MPC protocols today sequentially perform communication and computation. The participating parties must compute on their shares first and then perform data communication to allow the distribution of new secret shares before proceeding to the next computation step. In this work, we show that serialization is unnecessary, particularly in the context of ML computations (both in Convolutional neural networks and in Transformer-based models). We demonstrate that it is possible to carefully orchestrate the computation and communication steps to overlap. We propose MPC-Pipe, an efficient MPC system for both training and inference of ML workloads, which pipelines computations and communications in an MPC protocol during the online phase. MPC-Pipe proposes three pipeline schemes to optimize the online phase of ML in the semi-honest majority adversary setting. We implement MPC-Pipe by augmenting a modified version of CrypTen, which separates online and offline phases. We evaluate the end-to-end system performance benefits of the online phase of MPC using deep neural networks (VGG16, ResNet50) and Transformers using different network settings. We show that MPC-Pipe can improve the throughput and latency of ML workloads.
Key facts. Cited by 4 papers in the map (data through 7 Oct 2026). Builds on 28 of its 64 references that are in the map. First posted on arXiv 27 Sep 2022.
Builds on
28 of 64 references.
References · 28
- 2015Deep Residual Learning for Image Recognitioncited by 51,809
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2019Machine Unlearningcited by 1,020
- 2019Certified Data Removal from Machine Learning Modelscited by 512
- 2021Large Language Models Can Be Strong Differentially Private Learnerscited by 405
- 2021Differentially Private Fine-tuning of Language Modelscited by 392
- 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
- 2021CrypTen: Secure Multi-Party Computation Meets Machine Learningcited by 131
- 2018Slalom: Fast, Verifiable and Private Execution of Neural Networks in Trusted Hardwarecited by 101
- 2020FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learningcited by 74
- 2018Chameleon: A Hybrid Secure Computation Framework for Machine Learning Applicationscited by 67
- 2018Lagrange Coded Computing: Optimal Design for Resiliency, Security and Privacycited by 66
16 more
- 2019CrypTFlow: Secure TensorFlow Inferencecited by 61
- 2019XONN: XNOR-based Oblivious Deep Neural Network Inferencecited by 51
- 2021DeepReDuce: ReLU Reduction for Fast Private Inferencecited by 50
- 2021CryptGPU: Fast Privacy-Preserving Machine Learning on the GPUcited by 46
- 2021Breaking the Computation and Communication Abstraction Barrier in Distributed Machine Learning Workloadscited by 40
- 2019Privacy-Preserving Inference in Machine Learning Services Using Trusted Execution Environmentscited by 17
- 2021Circa: Stochastic ReLUs for Private Deep Learningcited by 16
- 2021Byzantine-Robust and Privacy-Preserving Framework for FedMLcited by 13
- 2021BTS: An Accelerator for Bootstrappable Fully Homomorphic Encryptioncited by 12
- 20213LegRace: Privacy-Preserving DNN Training over TEEs and GPUscited by 9
- 2021Intel HEXL: Accelerating Homomorphic Encryption with Intel AVX512-IFMA52cited by 8
- 2022Characterizing and Optimizing End-to-End Systems for Private Inferencecited by 8
- 2020HEAAN Demystified: Accelerating Fully Homomorphic Encryption Through Architecture-centric Analysis and Optimizationcited by 6
- 2020DarKnight: A Data Privacy Scheme for Training and Inference of Deep Neural Networkscited by 4
- 2021LAORAM: A Look Ahead ORAM Architecture for Training Large Embedding Tablescited by 4
- 2021Adaptive Verifiable Coded Computing: Towards Fast, Secure and Private Distributed Machine Learningcited by 4
Built on by
Citing papers per year: 2024: 1; 2025: 2; 2026: 1.
4 papers.
- 2025CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computationcited by 1
- 2024Which PPML Would a User Choose? A Structured Decision Support Framework for Developers to Rank PPML Techniques Based on User Acceptance Criteriacited by 0
- 2025PEEL the Layers and Find Yourself: Revisiting Inference-time Data Leakage for Residual Neural Networkscited by 0
- 2026LRD-MPC: Efficient MPC Inference through Low-rank Decompositioncited by 0
- 2026LRD-MPC: Efficient MPC Inference through Low-rank Decomposition16 Feb 2026
- 2025CrypTorch: PyTorch-based Auto-tuning Compiler for Machine Learning with Multi-party Computation24 Nov 2025
- 2025PEEL the Layers and Find Yourself: Revisiting Inference-time Data Leakage for Residual Neural Networks8 Apr 2025
- 2024Which PPML Would a User Choose? A Structured Decision Support Framework for Developers to Rank PPML Techniques Based on User Acceptance Criteria11 Nov 2024