Pushing Forward Multi-Secret-Key Homomorphic Encryption for Private Average Aggregation

2026-09-01

AI Summary

本文提出基于RLWE的多密钥同态加密协议，解决联邦学习中模型更新泄露敏感信息的问题，实现私有平均聚合。

Abstract

Federated Learning enables multiple clients to train a shared model while keeping their local datasets isolated. However, the exchanged model updates may still leak sensitive information, making private aggregation a central building block in practical deployments, especially in the cross-silo setting. Homomorphic Encryption naturally fits the client--aggregator communication pattern of Federated Learning, but conventional single-key deployments rely on strong non-collusion assumptions. Multiparty Homomorphic Encryption removes this limitation, although recent attacks under restricted decryption access require large-variance smudging noise during collaborative decryption, which significantly increases ciphertext size and implementation complexity. In this work, we propose lightweight multi-secret-key protocols for private average aggregation based on RLWE-based Homomorphic Encryption. Our construction departs from the usual multiparty blueprint by avoiding the generation of a collective public key. Instead, each client encrypts its update under its own secret key, while the resulting ciphertexts remain compatible with homomorphic aggregation and collaborative decryption. By explicitly tracking and cancelling the ciphertext noise during decryption, the protocol removes the need for large $λ$-dependent smudging noise. We instantiate the construction with both exact BFV-based and approximate CKKS-based variants, prove its security in the semi-honest model against an adversary corrupting the aggregator and up to $L-1$ clients, and compare its communication and runtime performance with state-of-the-art MHE-based aggregation. Our results show that the proposed approach substantially reduces ciphertext expansion and online cost, while preserving practical homomorphic aggregation performance.

Problem

• Federated Learning
• Homomorphic Encryption
• Private Aggregation
• Ciphertext Noise
• Multiparty Computation

Innovation

• Multi-Secret-Key Homomorphic Encryption
• Private Average Aggregation
• RLWE-based
• Ciphertext Noise Cancellation
• Lightweight Protocol