mlsanityData to 14 Oct 2026

Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGD

arXiv 2505.12128 ↗First posted 17 May 2025cs.CR cs.LGcited by 7

Not on the map. Why?

Abstract (arXiv)

Matrix factorization mechanisms for differentially private training have emerged as a promising approach to improve model utility under privacy constraints. In practical settings, models are typically trained over multiple epochs, requiring matrix factorizations that account for repeated participation. Existing theoretical upper and lower bounds on multi-epoch factorization error leave a significant gap. In this work, we introduce a new explicit factorization method, Banded Inverse Square Root (BISR), which imposes a banded structure on the inverse correlation matrix. This factorization enables us to derive an explicit and tight characterization of the multi-epoch error. We further prove that BISR achieves asymptotically optimal error by matching the upper and lower bounds. Empirically, BISR performs on par with state-of-the-art factorization methods, while being simpler to implement, computationally efficient, and easier to analyze.

Key facts. Cited by 7 papers in the map (data through 14 Oct 2026). Builds on 25 of its 35 references that are in the map. First posted on arXiv 17 May 2025.

Builds on

25 of 35 references.

References · 25

  1. 2018Improving the Gaussian Mechanism for Differential Privacy: Analytical Calibration and Optimal Denoisingcited by 218
  2. 2021Practical and Private (Deep) Learning without Sampling or Shufflingcited by 170
  3. 2022Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive Streamscited by 59
  4. 2023(Amplified) Banded Matrix Factorization: A unified approach to private trainingcited by 49
  5. 2022Multi-Epoch Matrix Factorization Mechanisms for Private Machine Learningcited by 48
  6. 2022Almost Tight Error Bounds on Differentially Private Continual Countingcited by 26
  7. 2023Correlated Noise Provably Beats Independent Noise for Differentially Private Learningcited by 23
  8. 2023Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential Privacycited by 18
  9. 2024Near Exact Privacy Amplification for Matrix Mechanismscited by 18
  10. 2023Privacy Amplification for Matrix Mechanismscited by 17
  11. 2024Efficient and Near-Optimal Noise Generation for Streaming Differential Privacycited by 17
  12. 2023A Unifying Framework for Differentially Private Sums under Continual Observationcited by 15
13 more
  1. 2024Balls-and-Bins Sampling for DP-SGDcited by 14
  2. 2024Scaling up the Banded Matrix Factorization Mechanism for Differentially Private MLcited by 13
  3. 2023A Smooth Binary Mechanism for Efficient Private Continual Observationcited by 12
  4. 2024Banded Square Root Matrix Factorization for Differentially Private Model Trainingcited by 12
  5. 2024A Hassle-free Algorithm for Private Learning in Practice: Don't Use Tree Aggregation, Use BLTscited by 9
  6. 2024Improved Differentially Private Continual Observation Using Group Algebracited by 7
  7. 2024Streaming Private Continual Counting via Binningcited by 7
  8. 2024Locally Differentially Private Online Federated Learning With Correlated Noisecited by 6
  9. 2025Continual Release Moment Estimation with Differential Privacycited by 5
  10. 2024DMM: Distributed Matrix Mechanism for Differentially-Private Federated Learning Based on Constant-Overhead Linear Secret Resharingcited by 3
  11. 2025Binned Group Algebra Factorization for Differentially Private Continual Countingcited by 3
  12. 2025An Inversion Theorem for Buffered Linear Toeplitz (BLT) Matrices and Applications to Streaming Differential Privacycited by 3
  13. 2025On the Space Complexity of Online Convolutioncited by 2

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 4.

7 papers.