Paper 2024/1087 Original: eprint.iacr.org/2024/1087 ↗

Tyche: Probabilistic Selection over Encrypted Data for Generative Language Models

Lars Folkerts
Nektarios Georgios Tsoutsos
Abstract

Generative AI, a significant technological disruptor in recent years, has impacted domains like augmented reality, coding assistance, and text generation. However, use of these models requires users to trust the model owners with their sensitive data given as input to the model. Fully Homomorphic Encryption (FHE) offers a promising solution, and many earlier works have investigated the use this technology for machine learning as a service (MLaaS) applications. Still, these efforts do not cater to generative models that operate probabilistically, allowing for diverse and creative outputs. In this work, we introduce three novel probabilistic selection algorithms for autoregressive generative AI: multiplication-scaled cumulative sum, heuristic cumulative sum, and the random-multiplication argmax. Each of these approaches presents distinctive challenges in optimizing the trade-off between precision and timing performance, a balance intricately tied to the specific characteristics of the data under consideration. Our results show that the random multiplication argmax-based method is more scalable than the cumulative sum methods and can accurately mimic the plaintext selection curve.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Preprint.
History
2024-07-04: last updated
2024-07-04: published
Short URL
https://ia.cr/2024/1087
License
https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2024/1087,
      author = {Lars Folkerts and Nektarios Georgios Tsoutsos},
      title = {Tyche: Probabilistic Selection over Encrypted Data for Generative Language Models},
      howpublished = {Cryptology {ePrint} Archive, Paper 2024/1087},
      year = {2024},
      url = {https://eprint.iacr.org/2024/1087}
}
Note: In order to protect the privacy of readers, this archive does not use cookies or embedded third party content.