Revisiting ML Training under Fully Homomorphic Encryption: Convergence Guarantees, Differential Privacy, and Efficient Algorithms
Yvonne Zhou, Mingyu Liang, Ivan Brugere, Danial Dervovic, Yue Guo, Antigoni Polychroniadou, Min Wu, Dana Dachman-Soled
Abstract
We present the first theoretical convergence analysis of machine learning training under fully homomorphic encryption (FHE), combined with a differentially private (DP) training algorithm tailored to encrypted computation. Our approach improves computational efficiency over standard differentially private gradient descent (DP-GD) while achieving comparable utility. In particular, we prove convergence of approximate gradient descent using polynomial approximations of activation and loss functions, which are required for FHE compatibility. To preserve privacy in downstream tasks, we integrate differential privacy without relying on costly per-sample gradient clipping, enabling scalable encrypted learning. We also provide data-independent hyperparameter selection and theoretically grounded strategies for polynomial approximation which can be of independent interest. Together, these contributions advance the feasibility of efficient, private, and secure machine learning on sensitive data.
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Builds on3
- Deep Learning with Differential PrivacyMartín Abadi, Andy Chu, Ian J. Goodfellow, H. Brendan McMahan et al.CCS 2016 · 7,620 citations
- Differentially Private Learning with Adaptive ClippingGalen Andrew, Om Thakkar, Brendan McMahan, Swaroop RamaswamyNeurIPS 2021 · 425 citations
- Efficient Ranking, Order Statistics, and Sorting under CKKSFederico Mazzone, Maarten H. Everts, Florian Hahn, Andreas PeterUSENIX Security 2025
Related papers
- HETAL: Efficient Privacy-preserving Transfer Learning with Homomorphic EncryptionSeewoo Lee, Garam Lee, Jung Woo Kim, Junbum Shin et al.ICML 2023 · 52 citations
- Parameter-free HE-friendly Logistic RegressionJunyoung Byun, Woojin Lee, Jaewook LeeNeurIPS 2021 · 10 citations
- HEPrune: Fast Private Training of Deep Neural Networks With Encrypted Data PruningYancheng Zhang, Mengxin Zheng, Yuzhang Shang, Xun Chen et al.NeurIPS 2024 · 23 citations
- FxHENN: FPGA-based acceleration framework for homomorphic encrypted CNN inferenceYilan Zhu, Xinyao Wang, Lei Ju, Shanqing GuoHPCA 2023 · 39 citations
- DictPFL: Efficient and Private Federated Learning on Encrypted GradientsJiaqi Xue, Mayank Kumar, Yuzhang Shang, Shangqian Gao et al.NeurIPS 2025 · 4 citations
