That's the reason for HEIR like optimization and parameter selection.
It narrows the 10^3 - 10^6 penalty to 10x - 100x.
back
2 comments
Thoughts on whether HE could be further hardware accelerated?
Which seems massively worse than a real local device in fact 2x is probably untenable to the point of uselessness because actually privacy sensitive matters need actual privacy that can't be defeated by your government telling Google to serve you compromised js and spy on you anyway and most people don't give 2 shits about privacy so they won't pay 10% more let alone 2x.
I'm glad people fund things that are only of interest to nerds but this will never be useful.
I think you have completely wrong use cases in mind. You will not use this for normal compute workloads.
Typical use cases are for doing biometric authentication without giving your biometric information, or sensitive queries using medical information. Apple has homomorphic encryption in image search. You can use your own photos encrypted into the cloud to search for landmarks in the image without revealing photos.
People can also coordinate and compare information without sharing sensitive data.
Yeah, for simple calculations on medical data or whatnot, FHE is a highly useful tool. I do wonder, will indistinguishability obfuscation or witness encryption ever be a viable scheme?
Is that (LLM) AI, though?