Decision-Aware Quadratic ReLU Replacement for HE-Friendly Inference
Not on the map. Why?
Abstract (arXiv)
Fully homomorphic encryption (FHE) supports only additions and multiplications, so FHE-only neural-network inference typically replaces ReLU with polynomials fitted over empirical activation intervals. Such interval fitting often requires higher-degree polynomials to control activation error, incurring homomorphic evaluation costs, while classification is determined by the final logit decision. We revisit ReLU replacement from a decision-aware perspective: given a trained single-hidden-layer ReLU MLP and a specified calibration set, can an HE-friendly low-degree polynomial replace ReLU without retraining while preserving calibration-set decisions? We focus on quadratic replacement, the lowest-degree that retains a genuine per-unit nonlinearity. For calibration sets positive-margin separable in the lifted space, we formulate quadratic replacement as a linear separation problem, yielding necessary and sufficient conditions for calibration-lossless replacement and a constructive algorithm for the coefficients. When the positive-margin condition fails -- often because a few near-boundary or misclassified calibration samples bring the lifted hulls into contact -- we extend the same geometric framework via reduced convex hulls and Lagrangian-dual soft-margin relaxations. These cap the weight any single sample can carry, converting the problem into smaller convex quadratic programs that yield approximately feasible coefficients with high empirical agreement on calibration-set decisions. In particular, at the maximal weight cap μ=1, the reduced-convex-hull relaxation reduces to standard convex-hull separation; the relaxation thus continuously extends the positive-margin exact theory. Under CKKS, the quadratic replacement matches plaintext top-1 accuracy on multiple benchmarks, running 3.7--4.1× faster than Remez-7 in the activation module and 1.18--1.68× faster end-to-end.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 16 of its 35 references that are in the map. First posted on arXiv 21 May 2026.
Builds on
16 of 35 references.
References · 16
- 2023DINOv2: Learning Robust Visual Features without Supervisioncited by 7,764
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2021MLP-Mixer: An all-MLP Architecture for Visioncited by 1,441
- 2025Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Modelscited by 1,175
- 2021ResMLP: Feedforward networks for image classification with data-efficient trainingcited by 338
- 2018Gazelle: A Low Latency Framework for Secure Neural Network Inferencecited by 193
- 2021Graph-less Neural Networks: Teaching Old MLPs New Tricks via Distillationcited by 151
- 2020CrypTFlow2: Practical 2-Party Secure Inferencecited by 82
- 2018Low Latency Privacy Preserving Inferencecited by 57
- 2017CryptoDL: Deep Neural Networks over Encrypted Datacited by 56
- 2019XONN: XNOR-based Oblivious Deep Neural Network Inferencecited by 51
- 2021Precise Approximation of Convolutional Neural Networks for Homomorphically Encrypted Datacited by 26
4 more
- 2019nGraph-HE2: A High-Throughput Framework for Neural Network Inference on Encrypted Datacited by 21
- 2019EVA: An Encrypted Vector Arithmetic Language and Compiler for Efficient Homomorphic Computationcited by 20
- 2023AutoFHE: Automated Adaption of CNNs for Efficient Evaluation over FHEcited by 15
- 2023Optimized Layerwise Approximation for Efficient Private Inference on Fully Homomorphic Encryptioncited by 4
Built on by
Not cited yet.