Rhombus: Fast Homomorphic Matrix-Vector Multiplication for Secure Two-Party Inference
Jiaxing He, Kang Yang, Guofeng Tang, Zhangjie Huang, Li Lin, Changzheng Wei, Ying Yan, Wei Wang
Abstract
We present Rhombus, a new secure matrix-vector multiplication (MVM) protocol in the semi-honest two-party setting, which is able to be seamlessly integrated into existing privacy-preserving machine learning (PPML) frameworks and serve as the basis of secure computation in linear layers. Rhombus adopts RLWE-based homomorphic encryption (HE) with coefficient encoding, which allows messages to be chosen from not only a field Fp but also a ring Z2l, where the latter supports faster computation in non-linear layers. To achieve better efficiency, we develop an input-output packing technique that reduces the communication cost incurred by HE with coefficient encoding by about 21×, and propose a split-point picking technique that reduces the number of rotations to that sublinear in the matrix dimension. Compared to the recent protocol HELiKs by Balla and Koushanfar (CCS'23), our implementation demonstrates that Rhombus improves the whole performance of an MVM protocol by a factor of 7.4x 8x, and improves the end-to-end performance of secure two-party inference of ResNet50 by a factor of 4.6x 18x.
Ask about this paper
Ask your agent about it.
Lune has read the top-tier papers around this one, so every answer names the papers it rests on.
Cited by top-tier papers10
- STIP: Three-Party Privacy-Preserving and Lossless Inference for Large Transformers in ProductionMu Yuan, Lan Zhang, Yihang Cheng, Miao-Hui Song et al.NDSS 2026 · 2 citations
- Encrypted Matrix-Vector Products from Secret Dual CodesFabrice Benhamouda, Caicai Chen, Shai Halevi, Yuval Ishai et al.CCS 2025 · 1 citation
- Breaking the Layer Barrier: Remodeling Private Transformer Inference with Hybrid CKKS and MPCTianshi Xu, Wen-jie Lu, Jiangrui Yu, Yi Chen et al.USENIX Security 2025
- Lodia: Towards Optimal Sparse Matrix-Vector Multiplication for Batched Fully Homomorphic EncryptionJiping Yu, Kun Chen, Xiaoyu Fan, Yunyi Chen et al.CCS 2025
- An Efficient Private GPT Never Autoregressively DecodesZhengyi Li, Yue Guan, Kang Yang, Yu Feng et al.ICML 2025
Related papers
- HELiKs: HE Linear Algebra Kernels for Secure InferenceShashank Balla, Farinaz KoushanfarCCS 2023 · 16 citations
- ABY2.0: Improved Mixed-Protocol Secure Two-Party ComputationArpita Patra, Thomas Schneider, Ajith Suresh, Hossein YalameUSENIX Security 2021 · 307 citations
- Scalable Privacy-Preserving Neural Network Training over Z2k via RMFE-Based Packing and Mixed-Circuit ComputationHengcheng ZhouAAAI 2026
- Scalable Multi-Party Computation Protocols for Machine Learning in the Honest-Majority SettingFengrun Liu, Xiang Xie, Yu YuUSENIX Security 2024 · 25 citations
- Iron: Private Inference on TransformersMeng Hao, Hongwei Li, Hanxiao Chen, Pengzhi Xing et al.NeurIPS 2022 · 209 citations
