MERGE: Fast Private Text Generation
Not on the map. Why?
Abstract (arXiv)
The drastic increase in language models' parameters has led to a new trend of deploying models in cloud servers, raising growing concerns about private inference for Transformer-based models. Existing two-party privacy-preserving techniques, however, only take into account natural language understanding (NLU) scenarios. Private inference in natural language generation (NLG), crucial for applications like translation and code completion, remains underexplored.In addition, previous privacy-preserving techniques suffer from convergence issues during model training and exhibit poor inference speed when used with NLG models due to the neglect of time-consuming operations in auto-regressive generations. To address these issues, we propose a fast private text generation framework for Transformer-based language models, namely MERGE.MERGE reuses the output hidden state as the word embedding to bypass the embedding computation and reorganize the linear operations in the Transformer module to accelerate the forward procedure. Extensive experiments show that MERGE achieves a 26.5x speedup to the vanilla encrypted model under the sequence length 512, and reduces 80% communication cost, with an up to 10x speedup to state-of-the-art approximated models.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Builds on 14 of its 30 references that are in the map. First posted on arXiv 25 May 2023.
Builds on
14 of 30 references.
References · 14
- 2017Attention Is All You Needcited by 59,932
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,491
- 2019BART: Denoising Sequence-to-Sequence Pre-training for Natural Language Generation, Translation, and Comprehensioncited by 5,874
- 2016Layer Normalizationcited by 5,579
- 2019BERTScore: Evaluating Text Generation with BERTcited by 5,462
- 2018GLUE: A Multi-Task Benchmark and Analysis Platform for Natural Language Understandingcited by 4,854
- 2016Gaussian Error Linear Units (GELUs)cited by 3,431
- 2021BARTScore: Evaluating Generated Text as Text Generationcited by 719
- 2017DailyDialog: A Manually Labelled Multi-turn Dialogue Datasetcited by 649
- 2021CrypTen: Secure Multi-Party Computation Meets Machine Learningcited by 131
- 2022MPCFormer: fast, performant and private Transformer inference with MPCcited by 67
- 2022THE-X: Privacy-Preserving Transformer Inference with Homomorphic Encryptioncited by 55
2 more
Built on by
Citing papers per year: 2023: 2; 2024: 2; 2025: 4.
8 papers.
- 2023Privacy in Large Language Models: Attacks, Defenses and Future Directionscited by 48
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Surveycited by 23
- 2023East: Efficient and Accurate Secure Transformer Framework for Inferencecited by 9
- 2024Power-Softmax: Towards Secure LLM Inference over Encrypted Datacited by 6
- 2025Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsitycited by 3
- 2025Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Trainingcited by 2
- 2025Virus Infection Attack on LLMs: Your Poisoning Can Spread "VIA" Synthetic Datacited by 2
- 2025An Efficient Private GPT Never Autoregressively Decodescited by 0
- 2025Virus Infection Attack on LLMs: Your Poisoning Can Spread "VIA" Synthetic Data27 Sep 2025
- 2025Failure Cases Are Better Learned But Boundary Says Sorry: Facilitating Smooth Perception Change for Accuracy-Robustness Trade-Off in Adversarial Training4 Aug 2025
- 2025An Efficient Private GPT Never Autoregressively Decodes21 May 2025
- 2025Comet: Accelerating Private Inference for Large Language Model by Predicting Activation Sparsity12 May 2025
- 2024Power-Softmax: Towards Secure LLM Inference over Encrypted Data12 Oct 2024
- 2024Deconstructing The Ethics of Large Language Models from Long-standing Issues to New-emerging Dilemmas: A Survey8 Jun 2024
- 2023Privacy in Large Language Models: Attacks, Defenses and Future Directions16 Oct 2023
- 2023East: Efficient and Accurate Secure Transformer Framework for Inference19 Aug 2023