一句话:提出客户端优化的同态加密卸载系统CHOCO及加解密加速器CHOCO-TACO,显著降低客户端通信与计算开销。
同态加密(HE)支持云服务器在加密数据上安全处理,但现有客户端辅助方案主要优化服务器性能,忽视客户端成本:加解密位于关键路径,且需传输大密文。本文提出 CHOCO,一个面向客户端的加密卸载系统,通过 HE 参数最小化和新的“旋转冗余”算法优化来减小密文尺寸,从而降低通信与计算开销。作者进一步提出 CHOCO-TACO,一种用于 HE 加解密的加速器,使资源受限客户端也能采用客户端辅助 HE。CHOCO 支持 BFV 与 CKKS 两种常用方案,并应用于 DNN、PageRank、KNN 和 K-Means。评估表明,相比先前工作,CHOCO 将通信最多降低 2948 倍;结合 CHOCO-TACO 后,客户端加解密速度最多提升 1094 倍,能耗最多降低 648 倍。
Homomorphic Encryption (HE) enables secure cloud offload processing on encrypted data. HE schemes are limited in the complexity and type of operations they can perform, motivating client-aided implementations that distribute computation between client (unencrypted) and server (encrypted). Prior client-aided systems optimize server performance, ignoring client costs: client-aided models put encryption and decryption on the critical path and require communicating large ciphertexts. We introduce Client-aided HE for Opaque Compute Offloading (CHOCO), a client-optimized system for encrypted offload processing. CHOCO reduces ciphertext size, reducing communication and computing costs through HE parameter minimization and through “rotational redundancy”, a new HE algorithm optimization. We present Client-aided HE for Opaque Compute Offloading Through Accelerated Cryptographic Operations (CHOCO-TACO), an accelerator for HE encryption and decryption, making client-aided HE feasible for even resource-constrained clients. CHOCO supports two popular HE schemes (BFV and CKKS) and several applications, including DNNs, PageRank, KNN, and K-Means. CHOCO reduces communication by up to 2948× over prior work. With CHOCO-TACO client enc-/decryption is up to 1094× faster and uses up to 648× less energy.