Primer: Fast Private Transformer Inference on Encrypted Data
Not on the map. Why?
Abstract (arXiv)
It is increasingly important to enable privacy-preserving inference for cloud services based on Transformers. Post-quantum cryptographic techniques, e.g., fully homomorphic encryption (FHE), and multi-party computation (MPC), are popular methods to support private Transformer inference. However, existing works still suffer from prohibitively computational and communicational overhead. In this work, we present, Primer, to enable a fast and accurate Transformer over encrypted data for natural language processing tasks. In particular, Primer is constructed by a hybrid cryptographic protocol optimized for attention-based Transformer models, as well as techniques including computation merge and tokens-first ciphertext packing. Comprehensive experiments on encrypted language modeling show that Primer achieves state-of-the-art accuracy and reduces the inference latency by 90.6% ~ 97.5% over previous methods.
Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). First posted on arXiv 23 Mar 2023.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2023: 4; 2024: 7; 2025: 7; 2026: 1.
19 papers.
Sort:
By area:
- 2023Privacy in Large Language Models: Attacks, Defenses and Future Directionscited by 48
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restorationcited by 27
- 2023Grounding Foundation Models through Federated Transfer Learning: A General Frameworkcited by 24
- 2023Converting Transformers to Polynomial Form for Secure Inference Over Homomorphic Encryptioncited by 19
- 2024No Free Lunch Theorem for Privacy-Preserving LLM Inferencecited by 13
- 2023East: Efficient and Accurate Secure Transformer Framework for Inferencecited by 9
- 2025CipherPrune: Efficient and Scalable Private Transformer Inferencecited by 9
- 2024SecFormer: Fast and Accurate Privacy-Preserving Inference for Transformer Models via SMPCcited by 7
- 2024Power-Softmax: Towards Secure LLM Inference over Encrypted Datacited by 6
- 2024CENTAUR: Bridging the Impossible Trinity of Privacy, Efficiency, and Performance in Privacy-Preserving Transformer Inferencecited by 6
- 2025Seed-Induced Uniqueness in Transformer Models: Subspace Alignment Governs Subliminal Transfercited by 5
- 2025TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generationcited by 4
7 more
- 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
- 2025Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Acceleratorscited by 2
- 2024TruncFormer: Private LLM Inference Using Only Truncationscited by 1
- 2025Private Transformer Inference in MLaaS: A Surveycited by 1
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradientscited by 1
- 2025Keys in the Weights: Transformer Authentication Using Model-Bound Latent Representationscited by 1
- 2026RobPI: Robust Private Inference against Malicious Clientcited by 0
- 2026RobPI: Robust Private Inference against Malicious Client23 Feb 2026
- 2025Seed-Induced Uniqueness in Transformer Models: Subspace Alignment Governs Subliminal Transfer2 Nov 2025
- 2025Keys in the Weights: Transformer Authentication Using Model-Bound Latent Representations2 Nov 2025
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Accelerators4 Jul 2025
- 2025Private Transformer Inference in MLaaS: A Survey15 May 2025
- 2025TFHE-Coder: Evaluating LLM-agentic Fully Homomorphic Encryption Code Generation15 Mar 2025
- 2025CipherPrune: Efficient and Scalable Private Transformer Inference24 Feb 2025
- 2024CENTAUR: Bridging the Impossible Trinity of Privacy, Efficiency, and Performance in Privacy-Preserving Transformer Inference14 Dec 2024
- 2024TruncFormer: Private LLM Inference Using Only Truncations2 Dec 2024
- 2024Power-Softmax: Towards Secure LLM Inference over Encrypted Data12 Oct 2024
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
7 more
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration3 Jun 2024
- 2024No Free Lunch Theorem for Privacy-Preserving LLM Inference31 May 2024
- 2024SecFormer: Fast and Accurate Privacy-Preserving Inference for Transformer Models via SMPC1 Jan 2024
- 2023Grounding Foundation Models through Federated Transfer Learning: A General Framework29 Nov 2023
- 2023Converting Transformers to Polynomial Form for Secure Inference Over Homomorphic Encryption15 Nov 2023
- 2023Privacy in Large Language Models: Attacks, Defenses and Future Directions16 Oct 2023
- 2023East: Efficient and Accurate Secure Transformer Framework for Inference19 Aug 2023
- 2023Privacy in Large Language Models: Attacks, Defenses and Future Directionscited by 48
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restorationcited by 27
- 2023Grounding Foundation Models through Federated Transfer Learning: A General Frameworkcited by 24
- 2023Converting Transformers to Polynomial Form for Secure Inference Over Homomorphic Encryptioncited by 19
- 2024No Free Lunch Theorem for Privacy-Preserving LLM Inferencecited by 13
- 2023East: Efficient and Accurate Secure Transformer Framework for Inferencecited by 9
- 2025CipherPrune: Efficient and Scalable Private Transformer Inferencecited by 9
- 2024SecFormer: Fast and Accurate Privacy-Preserving Inference for Transformer Models via SMPCcited by 7
- 2024Power-Softmax: Towards Secure LLM Inference over Encrypted Datacited by 6
- 2024CENTAUR: Bridging the Impossible Trinity of Privacy, Efficiency, and Performance in Privacy-Preserving Transformer Inferencecited by 6
- 2025Seed-Induced Uniqueness in Transformer Models: Subspace Alignment Governs Subliminal Transfercited by 5
- 2024CryptoTrain: Fast Secure Training on Encrypted Datasetcited by 3
12 most cited of 18 All 18 (JSON)
- 2026RobPI: Robust Private Inference against Malicious Client23 Feb 2026
- 2025Seed-Induced Uniqueness in Transformer Models: Subspace Alignment Governs Subliminal Transfer2 Nov 2025
- 2025Keys in the Weights: Transformer Authentication Using Model-Bound Latent Representations2 Nov 2025
- 2025DictPFL: Efficient and Private Federated Learning on Encrypted Gradients24 Oct 2025
- 2025Securing Transformer-based AI Execution via Unified TEEs and Crypto-protected Accelerators4 Jul 2025
- 2025Private Transformer Inference in MLaaS: A Survey15 May 2025
- 2025CipherPrune: Efficient and Scalable Private Transformer Inference24 Feb 2025
- 2024CENTAUR: Bridging the Impossible Trinity of Privacy, Efficiency, and Performance in Privacy-Preserving Transformer Inference14 Dec 2024
- 2024TruncFormer: Private LLM Inference Using Only Truncations2 Dec 2024
- 2024Power-Softmax: Towards Secure LLM Inference over Encrypted Data12 Oct 2024
- 2024CryptoTrain: Fast Secure Training on Encrypted Dataset25 Sep 2024
- 2024PrivacyRestore: Privacy-Preserving Inference in Large Language Models via Privacy Removal and Restoration3 Jun 2024
12 newest of 18 All 18 (JSON)