Back to Square Roots: An Optimal Bound on the Matrix Factorization Error for Multi-Epoch Differentially Private SGD
Nikita Kalinin, Ryan McKenna, Jalaj Upadhyay, Christoph H. Lampert
Abstract
Matrix factorization mechanisms for differentially private training have emerged as a promising approach to improve model utility under privacy constraints. In practical settings, models are typically trained over multiple epochs, requiring matrix factorizations that account for repeated participation. Existing theoretical upper and lower bounds on multi-epoch factorization error leave a significant gap. In this work, we introduce a new explicit factorization method, Banded Inverse Square Root (BISR), which imposes a banded structure on the inverse correlation matrix. This factorization enables us to derive an explicit and tight characterization of the multi-epoch error. We further prove that BISR achieves asymptotically optimal error by matching the upper and lower bounds. Empirically, BISR performs on par with the state of the art factorization methods, while being simpler to implement, computationally efficient, and easier to analyze.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext 13a9b887-455b-48c5-87d2-90d16ea2c2ddCited by top-tier papers2
- Continual Release Moment Estimation with Differential PrivacyNikita P. Kalinin, Jalaj Upadhyay, Christoph H. LampertNeurIPS 2025 · 5 citations
- Edit-Neighboring Data Streams and Privacy under Continual ObservationJoel Daniel Andersson, Anamay Chaturvedi, Monika Henzinger, Roodabeh SafaviCCS 2026
Builds on16
- Practical and Private (Deep) Learning Without Sampling or ShufflingPeter Kairouz, Brendan McMahan, Shuang Song, Om Thakkar et al.ICML 2021 · 239 citations
- Improved Differential Privacy for SGD via Optimal Private Linear Operators on Adaptive StreamsSergey Denisov, H. Brendan McMahan, John Rush, Adam D. Smith et al.NeurIPS 2022 · 96 citations
- (Amplified) Banded Matrix Factorization: A unified approach to private trainingChristopher A. Choquette-Choo, Arun Ganesh, Ryan McKenna, H. Brendan McMahan et al.NeurIPS 2023 · 67 citations
- Multi-Epoch Matrix Factorization Mechanisms for Private Machine LearningChristopher A. Choquette-Choo, Hugh Brendan McMahan, J. Keith Rush, Abhradeep Guha ThakurtaICML 2023 · 62 citations
- Correlated Noise Provably Beats Independent Noise for Differentially Private LearningChristopher A. Choquette-Choo, Krishnamurthy Dj Dvijotham, Krishna Pillutla, Arun Ganesh et al.ICLR 2024 · 27 citations
Related papers
- Banded Square Root Matrix Factorization for Differentially Private Model TrainingNikita P. Kalinin, Christoph H. LampertNeurIPS 2024 · 18 citations
- Gradient Descent with Linearly Correlated Noise: Theory and Applications to Differential PrivacyAnastasia Koloskova, Ryan McKenna, Zachary Charles, John Keith Rush et al.NeurIPS 2023 · 24 citations
- Scaling up the Banded Matrix Factorization Mechanism for Large Scale Differentially Private MLRyan McKennaICLR 2025
- Almost Tight Error Bounds on Differentially Private Continual CountingMonika Henzinger, Jalaj Upadhyay, Sarvagya UpadhyaySODA 2023 · 14 citations
- Near-Exact Privacy Amplification for Matrix MechanismsChristopher A. Choquette-Choo, Arun Ganesh, Saminul Haque, Thomas Steinke et al.ICLR 2025
