[JLS secagg encryption]: encrypt once both model weights and auxiliary variables #1250
Labels
candidate
an individual developer submits a work request to the team (extension proposal, bug, other request)
When using secure aggregation, auxiliary variables are encrypted (thanks to #1007 ) along model weights, but the encryption is done separately.
While it should be ok for
LOM
secagg algorithm, it is more concerning forJLS
, where parameters are encrypted using the same key, and could be deciphered through replay attacks.The goal of this PR is to encrypt both model weights and auxiliary variable at once, and therefore providing a better security when manipulating model and optimizers parameters.
The text was updated successfully, but these errors were encountered: