CryptoTrain: Fast Secure Training on Encrypted Dataset
Not on the map. Why?
Abstract (arXiv)
Secure training, while protecting the confidentiality of both data and model weights, typically incurs significant training overhead. Traditional Fully Homomorphic Encryption (FHE)-based non-inter-active training models are heavily burdened by computationally demanding bootstrapping. To develop an efficient secure training system, we established a foundational framework, CryptoTrain-B, utilizing a hybrid cryptographic protocol that merges FHE with Oblivious Transfer (OT) for handling linear and non-linear operations, respectively. This integration eliminates the need for costly bootstrapping. Although CryptoTrain-B sets a new baseline in performance, reducing its training overhead remains essential. We found that ciphertext-ciphertext multiplication (CCMul) is a critical bottleneck in operations involving encrypted inputs and models. Our solution, the CCMul-Precompute technique, involves precomputing CCMul offline and resorting to the less resource-intensive ciphertext-plaintext multiplication (CPMul) during private training. Furthermore, conventional polynomial convolution in FHE systems tends to encode irrelevant and redundant values into polynomial slots, necessitating additional polynomials and ciphertexts for input representation and leading to extra multiplications. Addressing this, we introduce correlated polynomial convolution, which encodes only related input values into polynomials, thus drastically reducing the number of computations and overheads. By integrating CCMul-Precompute and correlated polynomial convolution into CryptoTrain-B, we facilitate a rapid and efficient secure training framework, CryptoTrain. Extensive experiments demonstrate that CryptoTrain achieves a ~5.3X training time reduction compared to prior methods.
Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 17 of its 45 references that are in the map. First posted on arXiv 25 Sep 2024.
Builds on
17 of 45 references.
References · 17
- 2016A guide to convolution arithmetic for deep learningcited by 182
- 2020CrypTFlow2: Practical 2-Party Secure Inferencecited by 82
- 2020FALCON: Honest-Majority Maliciously Secure Framework for Private Deep Learningcited by 74
- 2019QUOTIENT: Two-Party Secure Neural Network Training and Predictioncited by 41
- 2019SHE: A Fast and Accurate Deep Neural Network for Encrypted Datacited by 36
- 2019Glyph: Fast and Accurately Training Deep Neural Networks on Encrypted Datacited by 28
- 2021SIRNN: A Math Library for Secure RNN Inferencecited by 28
- 2019Trident: Efficient 4PC Framework for Privacy Preserving Machine Learningcited by 26
- 2021HEMET: A Homomorphic-Encryption-Friendly Privacy-Preserving Mobile Neural Network Architecturecited by 24
- 2021F1: A Fast and Programmable Accelerator for Fully Homomorphic Encryption (Extended Version)cited by 23
- 2023Primer: Fast Private Transformer Inference on Encrypted Datacited by 19
- 2021Secure Quantized Training for Deep Learningcited by 15
5 more
- 2024HETAL: Efficient Privacy-preserving Transfer Learning with Homomorphic Encryptioncited by 12
- 2020AutoPrivacy: Automated Layer-wise Parameter Selection for Secure Neural Network Inferencecited by 7
- 2021Adam in Private: Secure and Fast Training of Deep Neural Networks with Adaptive Moment Estimationcited by 4
- 2022Audit and Improve Robustness of Private Neural Networks on Encrypted Datacited by 4
- 2023vFHE: Verifiable Fully Homomorphic Encryption with Blind Hashcited by 1
Built on by
Citing papers per year: 2025: 2; 2026: 1.
3 papers.