SHE-LoRA: Selective Homomorphic Encryption for Federated Tuning with Heterogeneous LoRA

ICLR 2026 Conference Submission1959 Authors

Keywords: Foundation models, LoRA, Homomorphic Encryption

TL;DR: SHE-LoRA: Privacy FL for edge devices via selective homomorphic encryption & adaptive LoRA. Matches non-private performance while cutting comms 93.7% and encryption compute 99.8%, comparing to full encryption.

Abstract:

Federated fine-tuning is critical for improving the performance of large language models (LLMs) in handling domain-specific tasks while keeping training data decentralized and private.
However, prior work has shown that clients' private data can actually be recovered via gradient inversion attacks.
Existing privacy preservation techniques against such attacks typically entail performance degradation and high costs, making them ill-suited for clients with heterogeneous data distributions and device capabilities.
In this paper, we propose SHE-LoRA, which integrates selective homomorphic encryption (SHE) and low-rank adaptation (LoRA) to enable efficient and privacy-preserving federated tuning of LLMs in cross-device environments.
Based on model parameter sensitivity assessment, heterogeneous clients adaptively negotiate and select a subset of model parameters for homomorphic encryption.
To ensure accurate model aggregation, we design a column-aware secure aggregation method and customized reparameterization techniques to align the aggregation results with the heterogeneous device capabilities of clients.
Extensive experiments demonstrate that SHE-LoRA maintains performance comparable to non-private baselines, achieves strong resistance to state-of-the-art attacks, and significantly reduces communication overhead by 99.71\% and encryption time by 99.87\%, compared to HE baselines.
Our code is accessible at https://anonymous.4open.science/r/SHE-LoRA.

Primary Area: foundation or frontier models, including LLMs

Submission Number: 1959