@article{einstein,
author =       "Albert Einstein",
title =        "{Zur Elektrodynamik bewegter Körper}",
journal =      "Annalen der Physik",
volume =       "322",
number =       "10",
pages =        "891--921",
year =         "1905"}

@book{latexcompanion,
author    = "Michel Goossens and Frank Mittelbach and Alexander Samarin",
title     = "The \LaTeX\ Companion",
year      = "1993",
publisher = "Addison-Wesley"}
@inproceedings{RN77,
   author = {Abadi, Martin and Chu, Andy and Goodfellow, Ian and McMahan, H Brendan and Mironov, Ilya and Talwar, Kunal and Zhang, Li},
   title = {Deep learning with differential privacy},
   booktitle = {Proceedings of the 2016 ACM SIGSAC conference on computer and communications security},
   pages = {308-318},
   type = {Conference Proceedings}
}

@article{RN76,
   author = {Albrecht, Martin R and Player, Rachel and Scott, Sam},
   title = {On the concrete hardness of learning with errors},
   journal = {JMC},
   volume = {9},
   number = {3},
   pages = {169-203},
   ISSN = {1862-2984},
   year = {2015},
   type = {Journal Article}
}

@article{RN47,
   author = {Aono, Yoshinori and Hayashi, Takuya and Wang, Lihua and Moriai, Shiho},
   title = {Privacy-preserving deep learning via additively homomorphic encryption},
   journal = {IEEE Transactions on Information Forensics Security},
   volume = {13},
   number = {5},
   pages = {1333-1345},
   ISSN = {1556-6013},
   year = {2017},
   type = {Journal Article}
}

@inproceedings{RN54,
   author = {Assran, Mahmoud and Loizou, Nicolas and Ballas, Nicolas and Rabbat, Mike},
   title = {Stochastic gradient push for distributed deep learning},
   booktitle = {International Conference on Machine Learning},
   publisher = {PMLR},
   pages = {344-353},
   ISBN = {2640-3498},
   type = {Conference Proceedings}
}

@inproceedings{RN78,
   author = {Bajard, Jean-Claude and Eynard, Julien and Hasan, M Anwar and Zucca, Vincent},
   title = {A full RNS variant of FV like somewhat homomorphic encryption schemes},
   booktitle = {International Conference on Selected Areas in Cryptography},
   publisher = {Springer},
   pages = {423-442},
   type = {Conference Proceedings}
}

@inproceedings{RN74,
   author = {Banerjee, Abhishek and Peikert, Chris and Rosen, Alon},
   title = {Pseudorandom functions and lattices},
   year = {2012},
   booktitle = {Annual International Conference on the Theory and Applications of Cryptographic Techniques},
   publisher = {Springer},
   pages = {719-737},
   type = {Conference Proceedings}
}

@inproceedings{RN55,
   author = {Bhagoji, Arjun Nitin and Chakraborty, Supriyo and Mittal, Prateek and Calo, Seraphin},
   title = {Analyzing federated learning through an adversarial lens},
   booktitle = {International Conference on Machine Learning},
   publisher = {PMLR},
   pages = {634-643},
   ISBN = {2640-3498},
   type = {Conference Proceedings}
}

@inproceedings {RN44,
   author = {Bonawitz, Keith and Ivanov, Vladimir and Kreuter, Ben and Marcedone, Antonio and McMahan, H Brendan and Patel, Sarvar and Ramage, Daniel and Segal, Aaron and Seth, Karn},
   title = {Practical secure aggregation for privacy-preserving machine learning},
   booktitle = {CCS},
   year = {2017},
   publisher = {ACM},
   pages = {1175-1191},
   type = {Conference Proceedings}
}


@inproceedings{RN81,
   author = {Chen, Hao and Dai, Wei and Kim, Miran and Song, Yongsoo},
   title = {Efficient multi-key homomorphic encryption with packed ciphertexts with application to oblivious neural network inference},
   booktitle = {Proceedings of the 2019 ACM SIGSAC Conference on Computer and Communications Security},
   pages = {395-412},
   year = {2019},
   type = {Conference Proceedings}
}

@article{RN29,
   author = {Damgård, Ivan and Jurik, Mads},
   title = {A generalisation, a simplification and some applications of Paillier's probabilistic public-key system},
   booktitle = {International workshop on public key cryptography},
   publisher = {Springer},
   pages = {119-136},
   type = {Conference Proceedings}
}

@inproceedings{RN60,
   author = {Du, Wenliang and Han, Yunghsiang S and Chen, Shigang},
   title = {Privacy-preserving multivariate statistical analysis: Linear regression and classification},
   booktitle = {Proceedings of the 2004 SIAM international conference on data mining},
   publisher = {SIAM},
   pages = {222-233},
   type = {Conference Proceedings}
}

@inproceedings{RN70,
   author = {Du, Wenliang and Han, Yunghsiang S and Chen, Shigang},
   title = {Privacy-preserving multivariate statistical analysis: Linear regression and classification},
   booktitle = {Proceedings of the 2004 SIAM international conference on data mining},
   publisher = {SIAM},
   pages = {222-233},
   type = {Conference Proceedings}
}

@inproceedings{RN51,
   author = {Fredrikson, Matt and Jha, Somesh and Ristenpart, Thomas},
   title = {Model inversion attacks that exploit confidence information and basic countermeasures},
   booktitle = {Proceedings of the 22nd ACM SIGSAC conference on computer and communications security},
   pages = {1322-1333},
   type = {Conference Proceedings}
}

@article{RN49,
   author = {Geyer, Robin C and Klein, Tassilo and Nabi, Moin},
   title = {Differentially private federated learning: A client level perspective},
   journal = {arXiv preprint arXiv:.07557},
   year = {2017},
   type = {Journal Article}
}

@article{RN69,
   author = {Hard, Andrew and Rao, Kanishka and Mathews, Rajiv and Ramaswamy, Swaroop and Beaufays, Françoise and Augenstein, Sean and Eichner, Hubert and Kiddon, Chloé and Ramage, Daniel %J arXiv preprint arXiv:.03604},
   title = {Federated learning for mobile keyboard prediction},
   year = {2018},
   type = {Journal Article}
}

@article{RN64,
   author = {Hardy, Stephen and Henecka, Wilko and Ivey-Law, Hamish and Nock, Richard and Patrini, Giorgio and Smith, Guillaume and Thorne, Brian %J arXiv preprint arXiv:.10677},
   title = {Private federated learning on vertically partitioned data via entity resolution and additively homomorphic encryption},
   year = {2017},
   type = {Journal Article}
}

@inproceedings{RN36,
   author = {Hitaj, Briland and Ateniese, Giuseppe and Perez-Cruz, Fernando},
   title = {Deep models under the GAN: information leakage from collaborative deep learning},
   booktitle = {Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security},
   pages = {603-618},
   type = {Conference Proceedings}
}

@article{RN79,
   author = {Krizhevsky, Alex and Sutskever, Ilya and Hinton, Geoffrey E %J Advances in neural information processing systems},
   title = {Imagenet classification with deep convolutional neural networks},
   volume = {25},
   pages = {1097-1105},
   year = {2012},
   type = {Journal Article}
}

@article{RN82,
   author = {LeCun, Yann},
   title = {The MNIST database of handwritten digits},
   journal = {http://yann.lecun.com/exdb/mnist/},
   year = {1998},
   type = {Journal Article}
}

@inproceedings{RN80,
   author = {McMahan, Brendan and Moore, Eider and Ramage, Daniel and Hampson, Seth and y Arcas, Blaise Aguera},
   title = {Communication-efficient learning of deep networks from decentralized data},
   booktitle = {Artificial intelligence and statistics},
   publisher = {PMLR},
   pages = {1273-1282},
   ISBN = {2640-3498},
   type = {Conference Proceedings}
}

@inproceedings{RN61,
   author = {Mohassel, Payman and Rindal, Peter},
   title = {ABY3: A mixed protocol framework for machine learning},
   booktitle = {Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security},
   pages = {35-52},
   type = {Conference Proceedings}
}

@inproceedings{RN20,
   author = {Mohassel, Payman and Zhang, Yupeng},
   title = {Secureml: A system for scalable privacy-preserving machine learning},
   booktitle = {2017 IEEE symposium on security and privacy (SP)},
   publisher = {IEEE},
   pages = {19-38},
   ISBN = {1509055339},
   type = {Conference Proceedings}
}

@inproceedings{RN62,
   author = {Mohassel, Payman and Zhang, Yupeng},
   title = {Secureml: A system for scalable privacy-preserving machine learning},
   booktitle = {2017 IEEE symposium on security and privacy (SP)},
   publisher = {IEEE},
   pages = {19-38},
   ISBN = {1509055339},
   type = {Conference Proceedings}
}

@inproceedings{RN65,
   author = {Nikolaenko, Valeria and Weinsberg, Udi and Ioannidis, Stratis and Joye, Marc and Boneh, Dan and Taft, Nina},
   title = {Privacy-preserving ridge regression on hundreds of millions of records},
   booktitle = {2013 IEEE Symposium on Security and Privacy},
   publisher = {IEEE},
   pages = {334-348},
   ISBN = {0769549772},
   type = {Conference Proceedings}
}


@article{RN66,
   author = {Pihur, Vasyl and Korolova, Aleksandra and Liu, Frederick and Sankuratripati, Subhash and Yung, Moti and Huang, Dachuan and Zeng, Ruogu %J arXiv preprint arXiv:.04369},
   title = {Differentially-private" draw and discard" machine learning},
   year = {2018},
   type = {Journal Article}
}

@article{RN50,
   author = {Cheng, Kewei and Fan, Tao and Jin, Yilun and Liu, Yang and Chen, Tianjian and Papadopoulos, Dimitrios and Yang, Qiang %J IEEE Intelligent Systems},
   title = {Secureboost: A lossless federated learning framework},
   ISSN = {1541-1672},
   year = {2021},
   type = {Journal Article}
}


@article{RN68,
  title={Advances and open problems in federated learning},
  author={Kairouz, Peter and McMahan, H Brendan and Avent, Brendan and Bellet, Aur{\'e}lien and Bennis, Mehdi and Bhagoji, Arjun Nitin and Bonawitz, Kallista and Charles, Zachary and Cormode, Graham and Cummings, Rachel and others},
  journal={Foundations and Trends{\textregistered} in Machine Learning},
  volume={14},
  number={1--2},
  pages={1--210},
  year={2021},
  publisher={Now Publishers, Inc.}
}

@article{RN56,
   author = {Khan, Manzoor Ahmed and Alkaabi, Najla %J Sensors},
   title = {Rebirth of Distributed AI—A Review of eHealth Research},
   volume = {21},
   number = {15},
   pages = {4999},
   year = {2021},
   type = {Journal Article}
}

@inbook{RN24,
   author = {Liu, Changchang and Chakraborty, Supriyo and Verma, Dinesh},
   title = {Secure model fusion for distributed learning using partial homomorphic encryption},
   booktitle = {Policy-Based Autonomic Data Governance},
   publisher = {Springer},
   pages = {154-179},
   year = {2019},
   type = {Book Section}
}

@inproceedings{RN72,
   author = {Mandal, Kalikinkar and Gong, Guang},
   title = {PrivFL: Practical privacy-preserving federated regressions on high-dimensional data over mobile networks},
   booktitle = {Proceedings of the 2019 ACM SIGSAC Conference on Cloud Computing Security Workshop},
   pages = {57-68},
   type = {Conference Proceedings}
}

@inproceedings{RN22,
   author = {Melis, Luca and Song, Congzheng and De Cristofaro, Emiliano and Shmatikov, Vitaly},
   title = {Exploiting unintended feature leakage in collaborative learning},
   booktitle = {2019 IEEE Symposium on Security and Privacy (SP)},
   publisher = {IEEE},
   pages = {691-706},
   ISBN = {153866660X},
   type = {Conference Proceedings}
}

@article{RN43,
   author = {Mouchet, Christian and Troncoso-Pastoriza, Juan and Bossuat, Jean-Philippe and Hubaux, Jean-Pierre %J Proceedings on Privacy Enhancing Technologies},
   title = {Multiparty homomorphic encryption from ring-learning-with-errors},
   volume = {4},
   pages = {291-311},
   year = {2021},
   type = {Journal Article}
}

@inproceedings{RN57,
   author = {Nandury, Kishore and Mohan, Anand and Weber, Frederick},
   title = {Cross-Silo Federated Training in the Cloud with Diversity Scaling and Semi-Supervised Learning},
   booktitle = {ICASSP 2021-2021 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)},
   publisher = {IEEE},
   pages = {3085-3089},
   ISBN = {1728176050},
   type = {Conference Proceedings}
}

@inproceedings{RN67,
   author = {Roth, Edo and Noble, Daniel and Falk, Brett Hemenway and Haeberlen, Andreas},
   title = {Honeycrisp: large-scale differentially private aggregation without a trusted core},
   booktitle = {Proceedings of the 27th ACM Symposium on Operating Systems Principles},
   pages = {196-210},
   type = {Conference Proceedings}
}

@article{RN59,
   author = {Sheller, Micah J and Edwards, Brandon and Reina, G Anthony and Martin, Jason and Pati, Sarthak and Kotrotsou, Aikaterini and Milchenko, Mikhail and Xu, Weilin and Marcus, Daniel and Colen, Rivka R },
   journal = {Scientific reports}，
   title = {Federated learning in medicine: facilitating multi-institutional collaborations without sharing patient data},
   volume = {10},
   number = {1},
   pages = {1-12},
   ISSN = {2045-2322},
   year = {2020},
   type = {Journal Article}
}


@article{RN46,
   author = {Xu, Guowen and Li, Hongwei and Liu, Sen and Yang, Kan and Lin, Xiaodong },
   journal = {IEEE Transactions on Information Forensics and Security}，
   title = {Verifynet: Secure and verifiable federated learning},
   volume = {15},
   pages = {911-926},
   ISSN = {1556-6013},
   year = {2019},
   type = {Journal Article}
}

@inproceedings{RN71,
   author = {Xu, Runhua and Baracaldo, Nathalie and Zhou, Yi and Anwar, Ali and Ludwig, Heiko},
   title = {Hybridalpha: An efficient approach for privacy-preserving federated learning},
   booktitle = {Proceedings of the 12th ACM Workshop on Artificial Intelligence and Security},
   pages = {13-23},
   type = {Conference Proceedings}
}

@article{RN31,
   author = {Yang, Qiang and Liu, Yang and Chen, Tianjian and Tong, Yongxin},
   title = {Federated machine learning: Concept and applications},
   journal = {ACM Transactions on Intelligent Systems and Technology},
   volume = {10},
   number = {2},
   pages = {1-19},
   ISSN = {2157-6904},
   year = {2019},
   type = {Journal Article}
}

@article{RN53,
   author = {Yang, Qiang and Liu, Yang and Cheng, Yong and Kang, Yan and Chen, Tianjian and Yu, Han},
   title = {Federated learning},
   journal = {Synthesis Lectures on Artificial Intelligence and Learning, Machine},
   volume = {13},
   number = {3},
   pages = {1-207},
   ISSN = {1939-4608},
   year = {2019},
   type = {Journal Article}
}


@inproceedings{RN48,
  title={$\{$BatchCrypt$\}$: Efficient Homomorphic Encryption for $\{$Cross-Silo$\}$ Federated Learning},
  author={Zhang, Chengliang and Li, Suyi and Xia, Junzhe and Wang, Wei and Yan, Feng and Liu, Yang},
  booktitle={2020 USENIX Annual Technical Conference (USENIX ATC 20)},
  pages={493--506},
  year={2020}
}

@book{RN34,
   author = {Zhu, Ligeng and Han, Song},
   title = {Deep leakage from gradients},
   publisher = {Springer},
   series = {Federated learning},
   pages = {17-31},
   year = {2020},
   type = {Book}
}


@inproceedings{RN174,
   author = {Banerjee, Abhishek and Peikert, Chris and Rosen, Alon},
   title = {Pseudorandom functions and lattices},
   year = {2012},
   booktitle = {EUROCRYPT},
   publisher = {Springer},
   pages = {719-737},
   type = {Conference Proceedings}
}


@inproceedings{RN39,
   author = {Boneh, Dan and Lewi, Kevin and Montgomery, Hart and Raghunathan, Ananth},
   title = {Key homomorphic PRFs and their applications},
   booktitle = {CRYPTO},
   publisher = {Springer},
   year = {2013},
   pages = {410-428},
   type = {Conference Proceedings}
}


@inproceedings{RN170,
  title={Practical covertly secure MPC for dishonest majority--or: breaking the SPDZ limits},
  author={Damg{\aa}rd, Ivan and Keller, Marcel and Larraia, Enrique and Pastro, Valerio and Scholl, Peter and Smart, Nigel P},
  booktitle={European Symposium on Research in Computer Security},
  pages={1--18},
  year={2013},
  organization={Springer}
}

@article{RN171,
   author = {Ernst, Johannes and Koch, Alexander},
   title = {Private Stream Aggregation with Labels in the Standard Model},
   journal = {PETs},
   volume = {2021},
   number = {4},
   pages = {117-138},
   year = {2021},
   type = {Journal Article}
}

@inproceedings{RN23,
  title={Deep models under the GAN: information leakage from collaborative deep learning},
  author={Hitaj, Briland and Ateniese, Giuseppe and Perez-Cruz, Fernando},
  booktitle={Proceedings of the 2017 ACM SIGSAC conference on computer and communications security},
  pages={603--618},
  year={2017}
}

@article{RN168,
   author = {Kadhe, S. and Rajaraman, N. and Koyluoglu, O. O. and Ramchandran, K.},
   title = {FastSecAgg: Scalable Secure Aggregation for Privacy-Preserving Federated Learning},
   journal = {arXiv preprint arXiv:2009.11248},
   year = {2020},
   type = {Journal Article}
}

@article{RN173,
   author = {Kairouz, Peter and McMahan, H Brendan and Avent, Brendan and Bellet, Aurélien and Bennis, Mehdi and Bhagoji, Arjun Nitin and Bonawitz, Kallista and Charles, Zachary and Cormode, Graham and Cummings, Rachel},
   title = {Advances and open problems in federated learning},
   journal = {arXiv preprint arXiv:.04977},
   year = {2019},
   type = {Journal Article}
}


@inproceedings{RN5,
  title={Public-key cryptosystems based on composite degree residuosity classes},
  author={Paillier, Pascal},
  booktitle={International conference on the theory and applications of cryptographic techniques},
  pages={223--238},
  year={1999},
  organization={Springer}
}

@inproceedings{RN26,
   author = {Paillier, Pascal},
   title = {Public-key cryptosystems based on composite degree residuosity classes},
   booktitle = {Eurocrypt},
   publisher = {Springer},
   pages = {223-238},
   type = {Conference Proceedings}
}

@article{RN167,
   author = {So, J. and Guler, B. and Avestimehr, A. S.},
   title = {Turbo-Aggregate: Breaking the Quadratic Aggregation Barrier in Secure Federated Learning},
   journal = {IEEE JSAIT},
   year = {2020},
   type = {Journal Article}
}


@inproceedings{RN27,
  title={A hybrid approach to privacy-preserving federated learning},
  author={Truex, Stacey and Baracaldo, Nathalie and Anwar, Ali and Steinke, Thomas and Ludwig, Heiko and Zhang, Rui and Zhou, Yi},
  booktitle={Proceedings of the 12th ACM workshop on artificial intelligence and security},
  pages={1--11},
  year={2019}
}


@inproceedings{RN172,
  title={Aggregation of time-series data under differential privacy},
  author={Valovich, Filipp},
  booktitle={International Conference on Cryptology and Information Security in Latin America},
  pages={249--270},
  year={2017},
  organization={Springer}
}

@article{RN38,
   author = {Yang, Qiang and Liu, Yang and Chen, Tianjian and Tong, Yongxin },
   title = {Federated machine learning: Concept and applications},
   journal = {ACM TIST},
   volume = {10},
   number = {2},
   pages = {1-19},
   year = {2019},
   type = {Journal Article}
}


@article{RN175,
   author = {Zhao, Yizhou and Sun, Hua},
   title = {Information theoretic secure aggregation with user dropouts},
   journal = {arXiv preprint arXiv:.07750},
   year = {2021},
   type = {Journal Article}
}

@inproceedings{RN55,
   author = {Bhagoji, Arjun Nitin and Chakraborty, Supriyo and Mittal, Prateek and Calo, Seraphin},
   title = {Analyzing federated learning through an adversarial lens},
   booktitle = {International Conference on Machine Learning},
   publisher = {PMLR},
   pages = {634-643},
   ISBN = {2640-3498},
   type = {Conference Proceedings}
}

@inproceedings{NEURIPS2019_60a6c400,
 author = {Zhu, Ligeng and Liu, Zhijian and Han, Song},
 booktitle = {Advances in Neural Information Processing Systems},
 editor = {H. Wallach and H. Larochelle and A. Beygelzimer and F. d\textquotesingle Alch\'{e}-Buc and E. Fox and R. Garnett},
 pages = {},
 publisher = {Curran Associates, Inc.},
 title = {Deep Leakage from Gradients},
 url = {https://proceedings.neurips.cc/paper/2019/file/60a6c4002cc7b29142def8871531281a-Paper.pdf},
 volume = {32},
 year = {2019}
}
@article{Nasr2018ComprehensivePA,
  title={Comprehensive Privacy Analysis of Deep Learning: Stand-alone and Federated Learning under Passive and Active White-box Inference Attacks},
  author={Milad Nasr and Reza Shokri and Amir Houmansadr},
  journal={ArXiv},
  year={2018},
  volume={abs/1812.00910}
}
@INPROCEEDINGS{8835245,
  author={Nasr, Milad and Shokri, Reza and Houmansadr, Amir},
  booktitle={2019 IEEE Symposium on Security and Privacy (SP)}, 
  title={Comprehensive Privacy Analysis of Deep Learning: Passive and Active White-box Inference Attacks against Centralized and Federated Learning}, 
  year={2019},
  volume={},
  number={},
  pages={739-753},
  doi={10.1109/SP.2019.00065}}
@INPROCEEDINGS{9148790,
  author={Zhang, Jingwen and Zhang, Jiale and Chen, Junjun and Yu, Shui},
  booktitle={ICC 2020 - 2020 IEEE International Conference on Communications (ICC)}, 
  title={GAN Enhanced Membership Inference: A Passive Local Attack in Federated Learning}, 
  year={2020},
  volume={},
  number={},
  pages={1-6},
  doi={10.1109/ICC40277.2020.9148790}}

@inproceedings {274683,
author = {Wanrong Zhang and Shruti Tople and Olga Ohrimenko},
title = {Leakage of Dataset Properties in Multi-Party Machine Learning},
booktitle = {30th USENIX Security Symposium (USENIX Security 21)},
year = {2021},
pages = {2687--2704},
publisher = {USENIX Association},
month = aug,
}

@inproceedings {RN169,
author = {Bell, James Henry and Bonawitz, Kallista A. and Gasc\'{o}n, Adri\`{a} and Lepoint, Tancr\`{e}de and Raykova, Mariana},
title = {Secure Single-Server Aggregation with (Poly)Logarithmic Overhead},
publisher = {ACM},
year = {2020},
booktitle = {CCS},
pages = {1253–1269},
numpages = {17},
keywords = {multi-party computation, secure aggregation, secure shuffling},
location = {Virtual Event, USA},

}

@inproceedings{RN180,
  title = 	 {{Communication-Efficient Learning of Deep Networks from Decentralized Data}},
  author = 	 {McMahan, Brendan and Moore, Eider and Ramage, Daniel and Hampson, Seth and Arcas, Blaise Aguera y},
  booktitle = 	 {Proceedings of the 20th International Conference on Artificial Intelligence and Statistics},
  pages = 	 {1273--1282},
  year = 	 {2017},
  editor = 	 {Singh, Aarti and Zhu, Jerry},
  volume = 	 {54},
  series = 	 {Proceedings of Machine Learning Research},
  month = 	 {20--22 Apr},
  publisher =    {PMLR},
  pdf = 	 {http://proceedings.mlr.press/v54/mcmahan17a/mcmahan17a.pdf},
  url = 	 {https://proceedings.mlr.press/v54/mcmahan17a.html},

}
@InProceedings{10.1007/978-3-642-32009-5_38,
author="Damg{\aa}rd, Ivan
and Pastro, Valerio
and Smart, Nigel
and Zakarias, Sarah",
editor="Safavi-Naini, Reihaneh
and Canetti, Ran",
title="Multiparty Computation from Somewhat Homomorphic Encryption",
booktitle="Advances in Cryptology -- CRYPTO 2012",
year="2012",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="643--662",
isbn="978-3-642-32009-5"
}
@inproceedings{10.1007/3-540-45472-1_7,
author="Fouque, Pierre-Alain
and Poupard, Guillaume
and Stern, Jacques",
editor="Frankel, Yair",
title="Sharing Decryption in the Context of Voting or Lotteries",
booktitle="Financial Cryptography",
year="2001",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="90--104",
isbn="978-3-540-45472-4"
}

@INPROCEEDINGS{4568388,
  author={Yao, Andrew C.},
  booktitle={23rd Annual Symposium on Foundations of Computer Science (sfcs 1982)},
  title={Protocols for secure computations}, 
  year={1982},
  volume={},
  number={},
  pages={160-164},
  doi={10.1109/SFCS.1982.38}}
@article{10.1145/359168.359176,
author = {Shamir, Adi},
title = {How to Share a Secret},
year = {1979},
issue_date = {Nov. 1979},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {22},
number = {11},
issn = {0001-0782},
url = {https://doi.org/10.1145/359168.359176},
doi = {10.1145/359168.359176},
abstract = {In this paper we show how to divide data D into n pieces in such a way that D is easily reconstructable from any k pieces, but even complete knowledge of k - 1 pieces reveals absolutely no information about D. This technique enables the construction of robust key management schemes for cryptographic systems that can function securely and reliably even when misfortunes destroy half the pieces and security breaches expose all but one of the remaining pieces.},
journal = {Commun. ACM},
month = {nov},
pages = {612–613},
numpages = {2},
keywords = {interpolation, key management, cryptography}
}

@inproceedings{10.1007/978-3-662-53644-5_9,
author="Peikert, Chris
and Shiehian, Sina",
editor="Hirt, Martin
and Smith, Adam",
title="Multi-key FHE from LWE, Revisited",
booktitle="Theory of Cryptography",
year="2016",
publisher="Springer Berlin Heidelberg",
address="Berlin, Heidelberg",
pages="217--238",
isbn="978-3-662-53644-5"
}
@misc{cryptoeprint:2012:144,
    author       = {Junfeng Fan and
		    Frederik Vercauteren},
    title        = {Somewhat Practical Fully Homomorphic Encryption},
    howpublished = {Cryptology ePrint Archive, Report 2012/144},
    year         = {2012},
    note         = {\url{https://ia.cr/2012/144}},
}
@article{10.1145/1568318.1568324,
author = {Regev, Oded},
title = {On Lattices, Learning with Errors, Random Linear Codes, and Cryptography},
year = {2009},
issue_date = {September 2009},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
volume = {56},
number = {6},
journal = {J. ACM},
month = {sep},
articleno = {34},
numpages = {40},
keywords = {quantum computation, public key encryption, cryptography, average-case hardness, Lattice}
}
@article{2014Fully,
  title={Fully homomorphic SIMD operations},
  author={ Smart, N. P.  and  Vercauteren, F. },
  journal={Designs,codes and crytography},
  year={2014},
}
@article{hochreiter1997long,
  title={Long short-term memory},
  author={Hochreiter, Sepp and Schmidhuber, J{\"u}rgen},
  journal={Neural computation},
  volume={9},
  number={8},
  pages={1735--1780},
  year={1997},
  publisher={MIT Press}
}

@article{rnn,
  title={Leaf: A benchmark for federated settings},
  author={Caldas, Sebastian and Duddu, Sai Meher Karthik and Wu, Peter and Li, Tian and Kone{\v{c}}n{\`y}, Jakub and McMahan, H Brendan and Smith, Virginia and Talwalkar, Ameet},
  journal={arXiv preprint arXiv:1812.01097},
  year={2018}
}
@article{article,
author = {Yu, Hao and Yang, Sen and Zhu, Shenghuo},
year = {2019},
month = {07},
pages = {5693-5700},
title = {Parallel Restarted SGD with Faster Convergence and Less Communication: Demystifying Why Model Averaging Works for Deep Learning},
volume = {33},
journal = {Proceedings of the AAAI Conference on Artificial Intelligence},
doi = {10.1609/aaai.v33i01.33015693}
}
@INPROCEEDINGS{8737416,
  author={Wang, Zhibo and Song, Mengkai and Zhang, Zhifei and Song, Yang and Wang, Qian and Qi, Hairong},
  booktitle={IEEE INFOCOM 2019 - IEEE Conference on Computer Communications}, 
  title={Beyond Inferring Class Representatives: User-Level Privacy Leakage From Federated Learning}, 
  year={2019},
  volume={},
  number={},
  pages={2512-2520},
  doi={10.1109/INFOCOM.2019.8737416}}

@article{DBLP:journals/corr/HeZRS15,
  author    = {Kaiming He and
               Xiangyu Zhang and
               Shaoqing Ren and
               Jian Sun},
  title     = {Deep Residual Learning for Image Recognition},
  journal   = {CoRR},
  volume    = {abs/1512.03385},
  year      = {2015},
  url       = {http://arxiv.org/abs/1512.03385},
  eprinttype = {arXiv},
  eprint    = {1512.03385},
  timestamp = {Wed, 17 Apr 2019 17:23:45 +0200},
  biburl    = {https://dblp.org/rec/journals/corr/HeZRS15.bib},
  bibsource = {dblp computer science bibliography, https://dblp.org}
}
@article{mnist,
  title={Fashion-mnist: a novel image dataset for benchmarking machine learning algorithms},
  author={Xiao, Han and Rasul, Kashif and Vollgraf, Roland},
  journal={arXiv preprint arXiv:1708.07747},
  year={2017}
}

@misc{2012Learning,
  title={Learning multiple layers of features from tiny images},
  author={Krizhevsky, Alex and Hinton, Geoffrey and others},
  year={2009},
  publisher={Citeseer}
}
@inproceedings{mcmahan2017communication,
  title={Communication-efficient learning of deep networks from decentralized data},
  author={McMahan, Brendan and Moore, Eider and Ramage, Daniel and Hampson, Seth and y Arcas, Blaise Aguera},
  booktitle={Artificial intelligence and statistics},
  pages={1273--1282},
  year={2017},
  organization={PMLR}
}
@incollection{albrecht2021homomorphic,
  title={Homomorphic encryption standard},
  author={Albrecht, Martin and Chase, Melissa and Chen, Hao and Ding, Jintai and Goldwasser, Shafi and Gorbunov, Sergey and Halevi, Shai and Hoffstein, Jeffrey and Laine, Kim and Lauter, Kristin and others},
  booktitle={Protecting Privacy through Homomorphic Encryption},
  pages={31--62},
  year={2021},
  publisher={Springer}
}
@article{bonawitz2019towards,
  title={Towards federated learning at scale: System design},
  author={Bonawitz, Keith and Eichner, Hubert and Grieskamp, Wolfgang and Huba, Dzmitry and Ingerman, Alex and Ivanov, Vladimir and Kiddon, Chloe and Kone{\v{c}}n{\`y}, Jakub and Mazzocchi, Stefano and McMahan, Brendan and others},
  journal={Proceedings of Machine Learning and Systems},
  volume={1},
  pages={374--388},
  year={2019}
}