{"id":"https://openalex.org/W4388856736","doi":"https://doi.org/10.1145/3576915.3623202","title":"Experimenting with Zero-Knowledge Proofs of Training","display_name":"Experimenting with Zero-Knowledge Proofs of Training","publication_year":2023,"publication_date":"2023-11-15","ids":{"openalex":"https://openalex.org/W4388856736","doi":"https://doi.org/10.1145/3576915.3623202"},"language":"en","primary_location":{"id":"doi:10.1145/3576915.3623202","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3576915.3623202","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009985076","display_name":"Sanjam Garg","orcid":"https://orcid.org/0000-0003-1330-0419"},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sanjam Garg","raw_affiliation_strings":["University of California, Berkeley, Berkeley, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-1330-0419","affiliations":[{"raw_affiliation_string":"University of California, Berkeley, Berkeley, CA, USA","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023235206","display_name":"Aarushi Goel","orcid":"https://orcid.org/0000-0002-8903-6354"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aarushi Goel","raw_affiliation_strings":["NTT Research, Sunnyvale, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-8903-6354","affiliations":[{"raw_affiliation_string":"NTT Research, Sunnyvale, CA, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088826068","display_name":"Somesh Jha","orcid":"https://orcid.org/0000-0001-5877-0436"},"institutions":[{"id":"https://openalex.org/I135310074","display_name":"University of Wisconsin\u2013Madison","ror":"https://ror.org/01y2jtd41","country_code":"US","type":"education","lineage":["https://openalex.org/I135310074"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Somesh Jha","raw_affiliation_strings":["University of Wisconsin - Madison, Madison, WI, USA"],"raw_orcid":"https://orcid.org/0000-0001-5877-0436","affiliations":[{"raw_affiliation_string":"University of Wisconsin - Madison, Madison, WI, USA","institution_ids":["https://openalex.org/I135310074"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049153799","display_name":"Saeed Mahloujifar","orcid":"https://orcid.org/0000-0001-6586-8378"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Saeed Mahloujifar","raw_affiliation_strings":["Meta AI, San Francisco, CA, USA"],"raw_orcid":"https://orcid.org/0000-0001-6586-8378","affiliations":[{"raw_affiliation_string":"Meta AI, San Francisco, CA, USA","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070147229","display_name":"Mohammad Mahmoody","orcid":"https://orcid.org/0000-0002-6839-4697"},"institutions":[{"id":"https://openalex.org/I51556381","display_name":"University of Virginia","ror":"https://ror.org/0153tk833","country_code":"US","type":"education","lineage":["https://openalex.org/I51556381"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammad Mahmoody","raw_affiliation_strings":["University of Virginia, Charlottesville, VA, USA"],"raw_orcid":"https://orcid.org/0000-0002-6839-4697","affiliations":[{"raw_affiliation_string":"University of Virginia, Charlottesville, VA, USA","institution_ids":["https://openalex.org/I51556381"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034991925","display_name":"Guru-Vamsi Policharla","orcid":"https://orcid.org/0009-0007-1494-8176"},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Guru-Vamsi Policharla","raw_affiliation_strings":["University of California, Berkeley, Berkeley, CA, USA"],"raw_orcid":"https://orcid.org/0009-0007-1494-8176","affiliations":[{"raw_affiliation_string":"University of California, Berkeley, Berkeley, CA, USA","institution_ids":["https://openalex.org/I95457486"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063827865","display_name":"M. Wang","orcid":"https://orcid.org/0009-0000-9057-1007"},"institutions":[{"id":"https://openalex.org/I95457486","display_name":"University of California, Berkeley","ror":"https://ror.org/01an7q238","country_code":"US","type":"education","lineage":["https://openalex.org/I95457486"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mingyuan Wang","raw_affiliation_strings":["University of California, Berkeley, Berkeley, CA, USA"],"raw_orcid":"https://orcid.org/0009-0000-9057-1007","affiliations":[{"raw_affiliation_string":"University of California, Berkeley, Berkeley, CA, USA","institution_ids":["https://openalex.org/I95457486"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":36,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1880","last_page":"1894"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/zero-knowledge-proof","display_name":"Zero-knowledge proof","score":0.9215790033340454},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.8856147527694702},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8034390211105347},{"id":"https://openalex.org/keywords/proof-of-concept","display_name":"Proof of concept","score":0.599818229675293},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.5497199296951294},{"id":"https://openalex.org/keywords/zero","display_name":"Zero (linguistics)","score":0.4987795352935791},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.4761400520801544},{"id":"https://openalex.org/keywords/proof-assistant","display_name":"Proof assistant","score":0.4714711010456085},{"id":"https://openalex.org/keywords/training","display_name":"Training (meteorology)","score":0.44747868180274963},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.42996925115585327},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2702730894088745},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.20441865921020508},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1370311975479126}],"concepts":[{"id":"https://openalex.org/C176329583","wikidata":"https://www.wikidata.org/wiki/Q191943","display_name":"Zero-knowledge proof","level":3,"score":0.9215790033340454},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.8856147527694702},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8034390211105347},{"id":"https://openalex.org/C124978682","wikidata":"https://www.wikidata.org/wiki/Q1201019","display_name":"Proof of concept","level":2,"score":0.599818229675293},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5497199296951294},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.4987795352935791},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.4761400520801544},{"id":"https://openalex.org/C203265346","wikidata":"https://www.wikidata.org/wiki/Q11387554","display_name":"Proof assistant","level":3,"score":0.4714711010456085},{"id":"https://openalex.org/C2777211547","wikidata":"https://www.wikidata.org/wiki/Q17141490","display_name":"Training (meteorology)","level":2,"score":0.44747868180274963},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.42996925115585327},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2702730894088745},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.20441865921020508},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1370311975479126},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C153294291","wikidata":"https://www.wikidata.org/wiki/Q25261","display_name":"Meteorology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3576915.3623202","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3576915.3623202","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G128618205","display_name":null,"funder_award_id":"CNS 1936826, CCF-FMitF-1836978, IIS- 2008559, SaTC-Frontiers-1804648, CCF-2046710, CCF-1652140, and 2039445, CCF-1910681, CNS1936799","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G8698995673","display_name":null,"funder_award_id":"FA9550-19-1-0200, FA9550-18-1-0166","funder_id":"https://openalex.org/F4320338279","funder_display_name":"Air Force Office of Scientific Research"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320338279","display_name":"Air Force Office of Scientific Research","ror":"https://ror.org/011e9bt93"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":43,"referenced_works":["https://openalex.org/W1479826086","https://openalex.org/W1568324739","https://openalex.org/W1980227445","https://openalex.org/W2043007983","https://openalex.org/W2067596507","https://openalex.org/W2080975816","https://openalex.org/W2098259215","https://openalex.org/W2141420453","https://openalex.org/W2144752539","https://openalex.org/W2151413173","https://openalex.org/W2293021588","https://openalex.org/W2496543269","https://openalex.org/W2572504188","https://openalex.org/W2614074621","https://openalex.org/W2701059868","https://openalex.org/W2765200655","https://openalex.org/W2765206040","https://openalex.org/W2883748642","https://openalex.org/W2891063150","https://openalex.org/W2895865029","https://openalex.org/W2898776076","https://openalex.org/W2940604890","https://openalex.org/W2963752132","https://openalex.org/W2984644945","https://openalex.org/W2994111940","https://openalex.org/W3008493372","https://openalex.org/W3096609273","https://openalex.org/W3097836574","https://openalex.org/W3116737310","https://openalex.org/W3133749795","https://openalex.org/W3147459559","https://openalex.org/W3154581591","https://openalex.org/W3158441657","https://openalex.org/W3213013974","https://openalex.org/W4210966189","https://openalex.org/W4285234987","https://openalex.org/W4288057725","https://openalex.org/W4304142026","https://openalex.org/W4308641630","https://openalex.org/W4308642742","https://openalex.org/W4312681946","https://openalex.org/W4313227190","https://openalex.org/W4315779433"],"related_works":["https://openalex.org/W1819460135","https://openalex.org/W4295798319","https://openalex.org/W2022025391","https://openalex.org/W2163538620","https://openalex.org/W1970588133","https://openalex.org/W353523607","https://openalex.org/W3012710117","https://openalex.org/W1585401881","https://openalex.org/W1598473030","https://openalex.org/W4385763783"],"abstract_inverted_index":{"How":[0],"can":[1,18],"a":[2,58,90,123],"model":[3,9,73],"owner":[4],"prove":[5],"they":[6,19],"trained":[7],"their":[8],"according":[10],"to":[11,68,105],"the":[12,24,27,31,40,95],"correct":[13],"specification?":[14],"More":[15],"importantly,":[16],"how":[17],"do":[20],"so":[21],"while":[22],"preserving":[23],"privacy":[25],"of":[26,42,45,61,97],"underlying":[28],"dataset":[29],"and":[30,38,102,113,121],"final":[32],"model?":[33],"We":[34,117],"study":[35],"this":[36,79,119],"problem":[37],"formulate":[39],"notion":[41],"zero-knowledge":[43,76],"proof":[44,60,77,85,111,114],"training":[46],"(zkPoT),":[47],"which":[48],"formalizes":[49],"rigorous":[50],"security":[51],"guarantees":[52],"that":[53],"should":[54],"be":[55],"achieved":[56],"by":[57],"privacy-preserving":[59],"training.":[62],"While":[63],"it":[64],"is":[65],"theoretically":[66],"possible":[67],"design":[69],"zkPoT":[70,127],"for":[71,129],"any":[72],"using":[74],"generic":[75],"systems,":[78],"approach":[80],"results":[81],"in":[82],"extremely":[83],"unpractical":[84],"generation":[86],"times.":[87],"Towards":[88],"designing":[89],"practical":[91],"solution,":[92],"we":[93],"propose":[94,122],"idea":[96,120],"combining":[98],"techniques":[99],"from":[100],"MPC-in-the-head":[101],"zkSNARKs":[103],"literature":[104],"strike":[106],"an":[107],"appropriate":[108],"trade-off":[109],"between":[110],"size":[112],"computation":[115],"time.":[116],"instantiate":[118],"concretely":[124],"efficient,":[125],"novel":[126],"protocol":[128],"logistic":[130],"regression.":[131]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":21},{"year":2024,"cited_by_count":10}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}
