FairProof : Confidential and Certifiable Fairness for Neural Networks
Chhavi Yadav, Amrita Roy Chowdhury, Dan Boneh, Kamalika Chaudhuri
Abstract
Machine learning models are increasingly used in societal applications, yet legal and privacy concerns demand that they very often be kept confidential. Consequently, there is a growing distrust about the fairness properties of these models in the minds of consumers, who are often at the receiving end of model predictions. To this end, we propose FairProof -a system that uses Zero-Knowledge Proofs (a cryptographic primitive) to publicly verify the fairness of a model, while maintaining confidentiality. We also propose a fairness certification algorithm for fully-connected neural networks which is befitting to ZKPs and is used in this system. We implement FairProof in Gnark and demonstrate empirically that our system is practically feasible. Code is available at https://github.com/infinite-pursuits/FairProof .
Ask about this paper
Your agent reads all of it.
Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.
Your agent calls
Luneget_paper_fulltext
Free to start. No credit card required.
Terminal
Install the CLIlune papers fulltext caf9cd1e-ff79-4eed-8bb7-8679d0febb0dCited by top-tier papers6
- Secure and Confidential Certificates of Online FairnessOlive Franzese, Ali Shahin Shamsabadi, Carter Luck, Hamed HaddadiNeurIPS 2025 · 10 citations
- Robust ML Auditing using Prior KnowledgeJade Garcia Bourrée, Augustin Godinot, Sayan Biswas, Anne-Marie Kermarrec et al.ICML 2025
- Certification of Machine Learning Models via Directional SharpnessGefei Tan, Adrià Gascón, Sarah Meiklejohn, Mariana RaykovaUSENIX Security 2026
- Certified in Theory, Broken in Practice: Assumption Gaps in Cryptographic Model CertificationCarter Luck, Olive Franzese-McLaughlin, Elisaweta Masserova, Akira Takahashi et al.USENIX Security 2026
- ExpProof : Operationalizing Explanations for Confidential Models with ZKPsChhavi Yadav, Evan Laufer, Dan Boneh, Kamalika ChaudhuriICML 2025
Builds on17
- SecureML: A System for Scalable Privacy-Preserving Machine LearningPayman Mohassel, Yupeng ZhangS&P 2017 · 2,107 citations
- GAZELLE: A Low Latency Framework for Secure Neural Network InferenceChiraag Juvekar, Vinod Vaikuntanathan, Anantha P. ChandrakasanUSENIX Security 2018 · 1,075 citations
- ABY3: A Mixed Protocol Framework for Machine LearningPayman Mohassel, Peter RindalCCS 2018 · 898 citations
- Oblivious Neural Network Predictions via MiniONN TransformationsJian Liu, Mika Juuti, Yao Lu, N. AsokanCCS 2017 · 800 citations
- Training individually fair ML models with sensitive subspace robustnessMikhail Yurochkin, Amanda Bower, Yuekai SunICLR 2020 · 123 citations
Related papers
- FairZK: A Scalable System to Prove Machine Learning Fairness in Zero-KnowledgeTianyu Zhang, Shen Dong, Oyku Deniz Kose, Yanning Shen et al.S&P 2025
- Confidential-PROFITT: Confidential PROof of FaIr Training of TreesAli Shahin Shamsabadi, Sierra Calanda Wyllie, Nicholas Franzese, Natalie Dullerud et al.ICLR 2023
- Trustless Audits without Revealing Data or ModelsSuppakit Waiwitlikhit, Ion Stoica, Yi Sun, Tatsunori Hashimoto et al.ICML 2024 · 20 citations
- GZKP: A GPU Accelerated Zero-Knowledge Proof SystemWeiliang Ma, Qian Xiong, Xuanhua Shi, Xiaosong Ma et al.ASPLOS 2023 · 47 citations
- Azkaban: A Zero-Knowledge Abstract Analysis for Neural NetworksSankha Das, Lucien K. L. Ng, Yibin Yang, Vladimir Kolesnikov et al.CCS 2026
