Chameleon: A Hybrid Secure Computation Framework for Machine Learning Applications

TL;DR

Chameleon is a hybrid secure computation framework that combines different cryptographic protocols to enable efficient privacy-preserving machine learning, significantly reducing communication overhead and accelerating neural network inference.

Contribution

It introduces a novel hybrid protocol combining additive secret sharing with garbled circuits, optimizing secure computation for machine learning tasks.

Findings

Achieves 133x faster inference than Microsoft CryptoNets

Reduces communication overhead through offline precomputation

Supports signed fixed-point numbers for encrypted data processing

Abstract

We present Chameleon, a novel hybrid (mixed-protocol) framework for secure function evaluation (SFE) which enables two parties to jointly compute a function without disclosing their private inputs. Chameleon combines the best aspects of generic SFE protocols with the ones that are based upon additive secret sharing. In particular, the framework performs linear operations in the ring $\mathbb{Z}_{2^l}$ using additively secret shared values and nonlinear operations using Yao's Garbled Circuits or the Goldreich-Micali-Wigderson protocol. Chameleon departs from the common assumption of additive or linear secret sharing models where three or more parties need to communicate in the online phase: the framework allows two parties with private inputs to communicate in the online phase under the assumption of a third node generating correlated randomness in an offline phase. Almost all of the heavy cryptographic operations are precomputed in an offline phase which substantially reduces the communication overhead. Chameleon is both scalable and significantly more efficient than the ABY framework (NDSS'15) it is based on. Our framework supports signed fixed-point numbers. In particular, Chameleon's vector dot product of signed fixed-point numbers improves the efficiency of mining and classification of encrypted data for algorithms based upon heavy matrix multiplications. Our evaluation of Chameleon on a 5 layer convolutional deep neural network shows 133x and 4.2x faster executions than Microsoft CryptoNets (ICML'16) and MiniONN (CCS'17), respectively.