Secure computation is of critical importance to not only the DoD, but across financial institutions, healthcare, and anywhere personally identifiable information (PII) is accessed. Traditional security techniques require data to be decrypted before performing any computation. When processed on untrusted systems the decrypted data is vulnerable to attacks to extract the sensitive information. To address these vulnerabilities Fully Homomorphic Encryption (FHE) keeps the data encrypted during computation and secures the results, even in these untrusted environments. However, FHE requires a significant amount of computation to perform equivalent unencrypted operations. To be useful, FHE must significantly close the computation gap (within 10x) to make encrypted processing practical. To accomplish this ambitious goal the TREBUCHET project is leading research and development in FHE processing hardware to accelerate deep computations on encrypted data, as part of the DARPA MTO Data Privacy for Virtual Environments (DPRIVE) program. We accelerate the major secure standardized FHE schemes (BGV, BFV, CKKS, FHEW, etc.) at >=128-bit security while integrating with the open-source PALISADE and OpenFHE libraries currently used in the DoD and in industry. We utilize a novel tile-based chip design with highly parallel ALUs optimized for vectorized 128b modulo arithmetic. The TREBUCHET coprocessor design provides a highly modular, flexible, and extensible FHE accelerator for easy reconfiguration, deployment, integration and application on other hardware form factors, such as System-on-Chip or alternate chip areas.
翻译:安全计算对于不仅仅是国防部门,还包括金融机构、医疗保健和任何访问个人身份信息(PII)的地方都至关重要。传统的安全技术要求在执行任何计算之前对数据进行解密。在不受信任的系统上处理时,解密数据容易遭受攻击,以提取敏感信息。为了解决这些漏洞,完全同态加密 (FHE) 在计算期间保持数据加密,即使在这些不受信任的环境中也可确保结果的安全。但是,FHE 需要大量的计算才能执行相当数量的未加密操作。为了使用,FHE 必须显著缩小计算间隙 (在 10x 内),以使加密处理变得实用。为了实现这一宏伟目标,TREBUCHET 项目领导 FHE 处理硬件的研究和开发,加速加密数据上的深度计算,作为 DARPA MTO 数据隐私虚拟环境 (DPRIVE) 计划的一部分。我们加速主要的安全标准 FHE 方案 (BGV、BFV、CKKS、FHEW),安全性 >=128 位,同时与当前在国防部门和工业界使用的开源 PALISADE 和 OpenFHE 库集成。我们利用一种新颖的瓷砖式芯片设计,具有高度并行的 ALU,可优化矢量化 128b 模算术。TREBUCHET 协处理器设计提供了一个高度模块化,灵活和可扩展的 FHE 加速器,易于重新配置、部署、集成和在其他硬件形式因素上应用,例如片上系统或其他芯片区域。