A Critical Look into Threshold Homomorphic Encryption for Private Average Aggregation
Fuente:
arXiv
Enregistré dans:
| Auteurs principaux: | , , |
|---|---|
| Format: | Preprint |
| Publié: |
2026
|
| Sujets: | |
| Accès en ligne: | |
| Tags: |
Ajouter un tag
Pas de tags, Soyez le premier à ajouter un tag!
|
| _version_ | 1866914350672904192 |
|---|---|
| author | Morona-Mínguez, Miguel Pedrouzo-Ulloa, Alberto Pérez-González, Fernando |
| author_facet | Morona-Mínguez, Miguel Pedrouzo-Ulloa, Alberto Pérez-González, Fernando |
| contents | Threshold Homomorphic Encryption (Threshold HE) is a good fit for implementing private federated average aggregation, a key operation in Federated Learning (FL). Despite its potential, recent studies have shown that threshold schemes available in mainstream HE libraries can introduce unexpected security vulnerabilities if an adversary has access to a restricted decryption oracle. This oracle reflects the FL clients' capacity to collaboratively decrypt the aggregated result without knowing the secret key. This work surveys the use of threshold RLWE-based HE for federated average aggregation and examines the performance impact of using smudging noise with a large variance as a countermeasure. We provide a detailed comparison of threshold variants of BFV and CKKS, finding that CKKS-based aggregations perform comparably to BFV-based solutions. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2602_22037 |
| institution | arXiv |
| publishDate | 2026 |
| record_format | arxiv |
| spellingShingle | A Critical Look into Threshold Homomorphic Encryption for Private Average Aggregation Morona-Mínguez, Miguel Pedrouzo-Ulloa, Alberto Pérez-González, Fernando Cryptography and Security Threshold Homomorphic Encryption (Threshold HE) is a good fit for implementing private federated average aggregation, a key operation in Federated Learning (FL). Despite its potential, recent studies have shown that threshold schemes available in mainstream HE libraries can introduce unexpected security vulnerabilities if an adversary has access to a restricted decryption oracle. This oracle reflects the FL clients' capacity to collaboratively decrypt the aggregated result without knowing the secret key. This work surveys the use of threshold RLWE-based HE for federated average aggregation and examines the performance impact of using smudging noise with a large variance as a countermeasure. We provide a detailed comparison of threshold variants of BFV and CKKS, finding that CKKS-based aggregations perform comparably to BFV-based solutions. |
| title | A Critical Look into Threshold Homomorphic Encryption for Private Average Aggregation |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2602.22037 |