paperbot · PL 论文追踪

全部论文 待读 收藏

P2 HALO: Loop-aware Bootstrapping Management for Fully Homomorphic Encryption

HALO:面向全同态加密的循环感知自举管理
ASPLOS Proceedings of the 30th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 12025匹配度 3/10 · 该论文属于全同态加密编译器优化,涉及循环感知的自举放置与代码生成,和 PL/编译方向有间接关联,并在 ML 程序上评测;但它不涉及用户核心关注的静态分析用于 ML/Agentic 程序、LLM/Agent 改进静态分析/形式化验证、浮点程序分析或贝叶斯程序分析,因此匹配度较低。引用 4 inbox
Seonyoung Cheon, Yongwoo Lee, Hoyun Youm, Dongkwan Kim, Sungwoo Yun, Kunmo Jeong, Dongyoon Lee, Hanjun Kim
crossref: 2026-09-12dblp: 2026-09-12

AI 速览

一句话:首个支持循环的全同态加密自举管理编译器,通过循环感知放置与优化降低自举开销。

全同态加密(FHE)支持在密文上计算,但重复乘法会耗尽密文的有限层级;自举可重置层级,却因高开销和下溢风险需要精细放置,加重编程负担。已有编译器虽能自动放置自举,但不支持循环。本文提出首个循环感知的自举管理编译器 HALO,它匹配循环中 live-in 与 loop-carried 密文的加密类型和层级,并通过将循环携带变量打包为单个密文、展开短循环、按需调整自举目标层级来减少循环体内自举次数与延迟。在七个含平坦和嵌套循环的机器学习程序上,HALO 相比在全展开循环上放置自举的最新编译器取得 27% 性能加速,并将编译时间和代码大小分别以几何平均降低 209.12 倍和 11.0 倍。

问题
FHE 中重复密文乘法会耗尽有限层级,自举虽可重置层级,但开销高且可能下溢;现有自动放置编译器不支持循环,限制了较大程序的可用性。
方法
HALO 是首个循环感知的自举管理编译器,通过匹配循环中 live-in 与 loop-carried 密文的加密类型和层级来正确支持循环,并结合循环携带变量打包、短循环展开和自举目标层级调整来优化自举放置。
评估
在七个含平坦和嵌套循环的机器学习程序上评估,相比最先进的在全展开循环上放置自举的编译器,HALO 获得 27% 性能加速,并几何平均降低编译时间 209.12 倍、代码大小 11.0 倍。
原文摘要(Abstract)

Thanks to the computation ability on encrypted data, fully homomorphic encryption (FHE) is an attractive solution for privacy-preserving computation. Despite its advantages, FHE suffers from limited applicability in small programs because repeated FHE multiplications deplete the level of a ciphertext, which is finite. Bootstrapping reinitializes the level, thus allowing support for larger programs. However, its high computational overhead and the risk of level underflow require sophisticated bootstrapping placement, thereby increasing the programming burden. Although a recently proposed compiler automatizes the bootstrapping placement, its applicability is still limited due to lack of loop support. This work proposes the first loop-aware bootstrapping management compiler, called HALO, which optimizes bootstrapping placement in an FHE program with a loop. To correctly support bootstrapping-enabled loops, HALO matches encryption types and levels between live-in and loop-carried ciphertexts in the loops. To reduce the bootstrapping overheads, HALO decreases the number of bootstrapping within a loop body by packing the loop-carried variables to a single ciphertext, reduces wasted levels in a short loop body by unrolling the loop, and optimizes the bootstrapping latency by adjusting the target level of bootstrapping as needed. For seven machine learning programs with flat and nested loops, HALO shows 27% performance speedup compared to the state-of-the-art compiler that places bootstrapping operations on fully unrolled loops. In addition, HALO reduces the compilation time and code size by geometric means of 209.12x and 11.0x compared to the compiler, respectively.

链接与引用

DOI 原文 · PDF(开放获取) · DBLP

BibTeX
@inproceedings{Cheon0Y0YJL025,
  title = {HALO: Loop-aware Bootstrapping Management for Fully Homomorphic Encryption},
  author = {Seonyoung Cheon and Yongwoo Lee and Hoyun Youm and Dongkwan Kim and Sungwoo Yun and Kunmo Jeong and Dongyoon Lee and Hanjun Kim},
  booktitle = {ASPLOS},
  year = {2025},
  doi = {10.1145/3669940.3707275}
}