mlsanityData to 7 Oct 2026

Decision-Aware Quadratic ReLU Replacement for HE-Friendly Inference

arXiv 2605.22237 ↗First posted 21 May 2026cs.CR cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

Fully homomorphic encryption (FHE) supports only additions and multiplications, so FHE-only neural-network inference typically replaces ReLU with polynomials fitted over empirical activation intervals. Such interval fitting often requires higher-degree polynomials to control activation error, incurring homomorphic evaluation costs, while classification is determined by the final logit decision. We revisit ReLU replacement from a decision-aware perspective: given a trained single-hidden-layer ReLU MLP and a specified calibration set, can an HE-friendly low-degree polynomial replace ReLU without retraining while preserving calibration-set decisions? We focus on quadratic replacement, the lowest-degree that retains a genuine per-unit nonlinearity. For calibration sets positive-margin separable in the lifted space, we formulate quadratic replacement as a linear separation problem, yielding necessary and sufficient conditions for calibration-lossless replacement and a constructive algorithm for the coefficients. When the positive-margin condition fails -- often because a few near-boundary or misclassified calibration samples bring the lifted hulls into contact -- we extend the same geometric framework via reduced convex hulls and Lagrangian-dual soft-margin relaxations. These cap the weight any single sample can carry, converting the problem into smaller convex quadratic programs that yield approximately feasible coefficients with high empirical agreement on calibration-set decisions. In particular, at the maximal weight cap μ=1, the reduced-convex-hull relaxation reduces to standard convex-hull separation; the relaxation thus continuously extends the positive-margin exact theory. Under CKKS, the quadratic replacement matches plaintext top-1 accuracy on multiple benchmarks, running 3.7--4.1× faster than Remez-7 in the activation module and 1.18--1.68× faster end-to-end.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 16 of its 35 references that are in the map. First posted on arXiv 21 May 2026.

Builds on

16 of 35 references.

References · 16

  1. 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
  2. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  3. 2021MLP-Mixer: An all-MLP Architecture for Visioncited by 1,441
  4. 2025Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Modelscited by 1,175
  5. 2021ResMLP: Feedforward networks for image classification with data-efficient trainingcited by 338
  6. 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
  7. 2021Graph-less Neural Networks: Teaching Old MLPs New Tricks via Distillationcited by 151
  8. 2020CrypTFlow2: Practical 2-Party Secure Inferencecited by 82
  9. 2018Low Latency Privacy Preserving Inferencecited by 57
  10. 2017CryptoDL: Deep Neural Networks over Encrypted Datacited by 56
  11. 2019XONN: XNOR-based Oblivious Deep Neural Network Inferencecited by 51
  12. 2021Precise Approximation of Convolutional Neural Networks for Homomorphically Encrypted Datacited by 26
4 more
  1. 2019nGraph-HE2: A High-Throughput Framework for Neural Network Inference on Encrypted Datacited by 21
  2. 2019EVA: An Encrypted Vector Arithmetic Language and Compiler for Efficient Homomorphic Computationcited by 20
  3. 2023AutoFHE: Automated Adaption of CNNs for Efficient Evaluation over FHEcited by 15
  4. 2023Optimized Layerwise Approximation for Efficient Private Inference on Fully Homomorphic Encryptioncited by 4

Built on by

Not cited yet.