Communication Dans Un Congrès Année : 2025

Unveiling the (in) security of threshold FHE-based federated learning: the practical impact of recent CPA D attacks

Résumé

The security of Fully Homomorphic Encryption (FHE) has received a lot of attention in recent years with new security notions emerging to better understand the practical attacks that may threaten the real-world deployments of passively secure FHE schemes. One such new notions is CPA D a slight extension of CPA security modelling a passive adversary who is granted access to a decryption oracle accepting only wellformed ciphertexts. While successful CPA D attacks have initially been performed on approximate FHE schemes such as CKKS, recent works have also demonstrated practical CPA D attacks on all mainstream non-approximate FHE, such as BFV, BGV or TFHE. Despite their clear computational practicality, these latter attacks however focus on the abstract security game defining CPA D security. In this paper, we show how to concretely build on these to mount successful FHE key recovery attacks in the Federated Learning (FL) setting, an application scenario of choice for FHE techniques. In FL, participating entities or workers encrypt successive model updates based on their local training data, enabling a central server to aggregate them in order to homomorphically update a global model. As this paper demonstrates, this environment provides a playground for an attacker to launch key recovery attacks against the FHE underlying the secure aggregation mechanism. As such, our findings reveal substantial stealthy key-recovery threats from both the server and a single worker, with very limited impact on the FL training progression or final model quality

Fichier principal
Vignette du fichier
CSF_216_camera_ready.pdf (1.15 Mo) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-05105133 , version 1 (10-06-2025)

Licence

Identifiants

  • HAL Id : hal-05105133 , version 1

Citer

Adda-Akram Bendoukha, Renaud Sirdey, Aymen Boudguiga, Nesrine Kaaniche. Unveiling the (in) security of threshold FHE-based federated learning: the practical impact of recent CPA D attacks. 2025 IEEE 38th Computer Security Foundations Symposium (CSF), Jun 2025, Santa cruz, United States. pp.378-393. ⟨hal-05105133⟩
347 Consultations
501 Téléchargements

Partager

  • More