REVIEW 4 major objections 5 minor 1 cited by
Leveraging Photonic Interconnects for Scalable and Efficient Fully Homomorphic Encryption
T0 review · 4 major / 5 minor · reviewed 2026-08-07 · deepseek-v4-flash
Pith's one-line read A photonic interconnect design called OptoLink is claimed to feed fully homomorphic encryption accelerators at 1.6 TB/s, 300 times the bitrate of an electrical link, with 10 ps latency.
desk verdict Plausible idea and a small real simulation, but the 1.6 TB/s headline is an unjustified 10x extrapolation from a 10 Gb/s demo; not ready for serious peer review. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The load-bearing mechanism is a wavelength-division-multiplexed photonic link built from micro-ring resonators (MRRs), the ring-shaped optical filters that modulate and filter light at specific wavelengths. A shared laser feeds a waveguide; transmitter MRRs imprint electrical data onto distinct wavelength channels, filter MRRs at the receiver pick out those wavelengths, and photodetectors convert the light back to electrical signals, with multiple parallel waveguides (space-division multiplexing) adding another axis of parallelism. Each wavelength carries one bit per channel, and the paper cites a prior result of up to 64 wavelengths per waveguide as the basis for scaling. This optical datapath is what converts a hard electrical bandwidth ceiling into a scalable optical one, and it is also where the paper's extrapolation from a demonstrated 10 Gb/s link to 100 Gb/s per channel lives.
What would settle it
Run the same single-channel simulation at 100 Gb/s instead of 10 Gb/s, or fabricate a 128-channel photonic link and measure bit error rate and per-channel insertion loss at full aggregate bandwidth; if error-free 100 Gb/s per channel is not achieved, or if loss and crosstalk at 128 channels force a lower bitrate or higher laser power, the 1.6 TB/s claim collapses.
Extended reading notes
Core claim
The paper's central claim is that replacing electrical wires with a photonic network based on wavelength-division and space-division multiplexing lets an FHE accelerator move ciphertexts, twiddle factors, and intermediate results at terabyte-scale bandwidth with picosecond latency. In the paper's account, a single OptoLink channel runs at 100 Gb/s (12.5 GB/s), and 128 channels give 1.6 TB/s, compared with 5.26 GB/s at 3.04 ns for an equivalent electrical network at 128-bit width; scaling to 192 and 1024 channels yields 2.4 TB/s and 12.8 TB/s. The paper argues that compute acceleration alone cannot make FHE practical because data transportation dominates execution time in large-parameter settings, and photonic interconnects close that gap.
Load-bearing premise
The whole throughput claim rests on the assumption that the demonstrated 10 Gb/s per-wavelength optical link can be scaled tenfold to 100 Gb/s per channel and replicated across 128 channels without extra optical loss, crosstalk, thermal drift, or packaging penalties.
Editorial extensions
If this is right
- An FHE accelerator using OptoLink could move NTT inputs, twiddle factors, and outputs at 1.6 TB/s, removing the memory-transfer stall the paper identifies as the dominant cost in large-parameter FHE.
- Adding channels scales the link: 192 channels reach 2.4 TB/s and 1024 channels reach 12.8 TB/s without widening the electrical datapath.
- With 10 ps link latency, read-after-write conflicts and pipeline stalls in NTT dataflow become far less expensive, simplifying memory scheduling.
- The same photonic datapath can carry key-switching and basis-conversion traffic, since it transports raw data rather than NTT-specific logic.
Reading between the lines
- The paper's power numbers show OptoLink drawing roughly three to four orders of magnitude more power than the electrical links it replaces; a fair system comparison would need to credit the power saved by shorter execution time, which the paper does not quantify.
- Because the only shown waveform is a 10 Gb/s PRBS, the 100 Gb/s per-channel figure is an extrapolation; a direct multi-wavelength prototype at 100 Gb/s would be the natural next test.
- If terabyte-scale interconnect bandwidth becomes real, the FHE bottleneck may shift back to the NTT compute units, making on-chip arithmetic rather than data movement the next design target.
- The same WDM/SDM approach could serve other memory-bound lattice-cryptography workloads, such as zero-knowledge proofs or post-quantum signatures, which share the same polynomial-multiplication data movement pattern.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. This manuscript proposes OptoLink, a silicon-photonic WDM/SDM interconnect intended to connect NTT modules and memory in FHE accelerators. The authors describe an architecture using microring modulators and filters, waveguides, photodetectors, and TIAs, and they report a Synopsys OptoCompiler simulation of two optical channels carrying a 64-bit PRBS at 10 Gb/s over a 1 mm waveguide with 10 ps latency. They then compare timing, power, and area against an electrical network synthesized with a 32 nm library. The headline claims are 1.6 TB/s aggregate throughput over 128 channels, 2.4 TB/s for 192 channels, and "300 times" the bandwidth of electrical interconnects.
Significance. The motivation is real and well documented: FHE/NTT workloads are memory-bandwidth-limited, and existing accelerators need multi-TB/s interconnect bandwidth. A photonic interconnect with validated per-channel data rates and physically grounded scaling rules would be a useful contribution to the FHE accelerator literature. The paper also gives a clear high-level architecture and uses commercial EDA tools for the optical link, which is a strength in principle. However, the central quantitative claims are not established by the reported experiments: the only optical simulation runs at 10 Gb/s per channel, and the 1.6 TB/s figure is an arithmetic product of an assumed 100 Gb/s per channel and an assumed 128 channels. As a result, the paper's main finding rests on an unverified extrapolation rather than on measurement or simulation.
major comments (4)
- [Sec. IV-A] The sentences "Data was sent at 10Gb/s" and "Each OptoLink channel achieved a data rate of 100Gb/s" are in direct contradiction. The PRBS simulation produces 64 bits in 6.4 ns, i.e., 10 Gb/s per channel, and no simulation, measurement, or derivation at 100 Gb/s is presented. Since the aggregate throughput of 1.6 TB/s = 128 × 12.5 GB/s is built entirely from the 100 Gb/s assumption, the headline result is circular with respect to the input assumptions and cannot be claimed as a demonstrated outcome. At 100 Gb/s OOK the unit interval is 10 ps, equal to the reported waveguide latency, so the 10 Gb/s simulation does not exercise modulator, photodetector, TIA, dispersion, or crosstalk behavior at the claimed rate.
- [Sec. IV-A and Table III] The electrical baseline is not specified. The table reports 5.26 GB/s at 3.04 ns latency for a 128-bit bus, but no clock frequency, signaling standard, wire model, or link-level simulation is given. If 5.26 GB/s is obtained as 128 bits divided by 3.04 ns, that conflation of latency with bit period yields a 42 Gb/s bus, which is not representative of any conventional electrical interconnect. The 300x speedup claim requires a documented electrical baseline, such as a specific SerDes or parallel bus with a stated clock rate and signaling scheme.
- [Sec. III-A, Sec. III-C, and Fig. 4] The 128-channel implementation is not described. The text cites a 64-wavelength WDM limit from [27], while Fig. 4 instantiates 24 wavelengths across five waveguides. The paper does not specify how 128 channels are obtained—whether by multiple waveguides (SDM), polarization multiplexing, or wavelength reuse—nor does it provide a loss budget or crosstalk estimate for that configuration. Without this, the 1.6 TB/s figure is not tied to a concrete physical design.
- [Sec. IV-B and Table IV] The power analysis omits the dominant term. Equation (4) defines Ptotal = Plaser + PTX + PRX, but no derivation of Plaser is given, and the quoted per-channel PTX + PRX of 1.22 mW + 0.92 mW = 2.14 mW cannot produce the reported 6.59 W for 128 channels, which implies about 51.5 mW per channel. The laser power must be derived from the Table II loss budget, and the receiver sensitivity or BER target must be stated, before the power comparison in Fig. 7 can be interpreted.
minor comments (5)
- [Fig. 1 caption] The caption reads "fully holomorphic encryption" and should be "fully homomorphic encryption."
- [Sec. IV-A and Sec. V] There are several typos: "architectures scalibility" should be "architecture's scalability," and "optomized" should be "optimized."
- [Sec. III-A] Reference [27] is cited for 64 wavelengths at 10 Gb/s, not 100 Gb/s per wavelength; the paper should either use that citation consistently or supply a separate reference for 100 Gb/s-class WDM links.
- [Table III] The table column labeled "Bitwidth" mixes electrical bus width with optical channel count; the optical-side columns should be labeled "number of optical channels" to avoid confusion.
- [Sec. IV-B] The sentence giving per-channel power says "PTX = 1.22mW and PTX = 0.92mW," where the second quantity should presumably be PRX.
Circularity Check
Headline 1.6 TB/s throughput is an assumed 100 Gb/s per channel times an assumed 128 channels, presented as a measurement after a 10 Gb/s two-channel simulation.
-
fitted input called prediction
[Section IV-A, Timing Analysis]
"Data was sent at 10Gb/s via a pseudo-random bit sequence (PRBS) generator, which needed 6.4ns to produce a complete sequence. ... Each OptoLink channel achieved a data rate of 100Gb/s or 12.5GB/s, with a total bandwidth of 1.6TB/s for 128 channels, sufficient for FHE workloads."
The only simulated evidence in this section is a 10 Gb/s PRBS over two wavelengths, yielding 64 bits in 6.4 ns. The next sentence jumps to 100 Gb/s per channel, a 10x increase, and then multiplies by 128 channels to obtain 1.6 TB/s. Neither the per-channel rate nor the channel count is derived from any measurement, link-budget, BER, crosstalk, or bandwidth-penalty analysis; Table II is a static loss budget with no data-rate dependence. The headline throughput is therefore the product of assumed inputs, relabeled as an achieved result.
full rationale
The paper's central performance claim is not an independent result: 1.6 TB/s = 12.5 GB/s × 128, where both factors are assumptions rather than measurements. The only demonstrated rate is 10 Gb/s per channel on two channels, so the 100 Gb/s per-channel figure is an extrapolation presented as 'achieved.' This is a reduction-by-construction of the headline number. The paper does not rely on self-citation or a uniqueness theorem imported from the authors' prior work, and the separate power and area analyses are self-contained estimates. However, because the abstract and conclusion advertise the 1.6 TB/s as the main contribution, the core result reduces to the assumed parameters, warranting a high circularity score.
Assumptions & free parameters
free parameters (3)
- per-channel optical data rate =
100 Gb/s (assumed)
- number of optical channels =
128 (design choice)
- electrical baseline bitrate =
5.26 GB/s at 128-bit
assumptions (3)
- ad hoc to paper A 10 Gb/s single-channel optical link simulation is representative of a 128-channel system running at 100 Gb/s per channel.
- domain assumption The photonic parameters in Table II (laser 5 dB, coupler 1 dB, etc.) and the per-transceiver powers from Ref. [29] remain valid when scaling to 128 channels.
- ad hoc to paper The electrical interconnect synthesized with a 32 nm library is a fair baseline for comparing bandwidth and latency against a photonic link.
invented entities (1)
-
OptoLink architecture
Cite this review
Pith. "Pith review of Leveraging Photonic Interconnects for Scalable and Efficient Fully Homomorphic Encryption." pith.science (2026). https://pith.science/paper/ZK5AUDGZ
@misc{pith2026250612962,
author = {Pith},
title = {Pith review of: Leveraging Photonic Interconnects for Scalable and Efficient Fully Homomorphic Encryption},
year = {2026},
howpublished = {\url{https://pith.science/paper/ZK5AUDGZ}},
note = {Machine review of arXiv:2506.12962}
}
read the original abstract
Fully Homomorphic Encryption (FHE) facilitates secure computations on encrypted data but imposes significant demands on memory bandwidth and computational power. While current FHE accelerators focus on optimizing computation, they often face bandwidth limitations that result in performance bottlenecks, particularly in memory-intensive operations. This paper presents OptoLink, a scalable photonic interconnect architecture designed to address these bandwidth and latency challenges in FHE systems. OptoLink achieves a throughput of 1.6 TB/s with 128 channels, providing 300 times the bandwidth of conventional electrical interconnects. The proposed architecture improves data throughput, scalability, and reduces latency, making it an effective solution for meeting the high memory and data transfer requirements of modern FHE accelerators.
Figures
Forward citations
Cited by 1 Pith paper
-
ECOLogic: Enabling Circular, Obfuscated, and Adaptive Logic via eFPGA-Augmented SoCs
ECOLogic embeds an eFPGA fabric into an ASIC and uses a weighted ECOScore framework to decide which IP blocks should be reconfigurable, claiming near-ASIC performance with large power and carbon savings.
Reference graph
Works this paper leans on
-
[27]
Device Requirements for Optical Interconnects to Silicon Chips,
D. A. B. Miller, “Device Requirements for Optical Interconnects to Silicon Chips,” Proceedings of the IEEE, vol. 97, no. 7, pp. 1166–1185, 2009
work page 2009
-
[1]
Survey on fully homomorphic encryption, theory, and ap- plications,
C. Marcolla, V . Sucasas, M. Manzano, R. Bassoli, F. H. Fitzek, and N. Aaraj, “Survey on fully homomorphic encryption, theory, and ap- plications,” Proceedings of the IEEE , vol. 110, no. 10, pp. 1572–1609, 2022
2022
-
[2]
Implementing gentry’s fully-homomorphic encryption scheme,
C. Gentry and S. Halevi, “Implementing gentry’s fully-homomorphic encryption scheme,” in Annual international conference on the theory and applications of cryptographic techniques. Springer, 2011, pp. 129– 148
work page 2011
-
[3]
Somewhat practical fully homomorphic encryption,
J. Fan and F. Vercauteren, “Somewhat practical fully homomorphic encryption,” Cryptology ePrint Archive , 2012
2012
-
[4]
Homomorphic encryption for arithmetic of approximate numbers,
J. H. Cheon, A. Kim, M. Kim, and Y . Song, “Homomorphic encryption for arithmetic of approximate numbers,” in Advances in Cryptology– ASIACRYPT 2017: 23rd International Conference on the Theory and Applications of Cryptology and Information Security, Hong Kong, China, December 3-7, 2017, Proceedings, Part I 23 . Springer, 2017, pp. 409– 437
2017
-
[5]
Fpga-based high-performance parallel architecture for homomorphic computing on encrypted data,
S. S. Roy, F. Turan, K. Jarvinen, F. Vercauteren, and I. Verbauwhede, “Fpga-based high-performance parallel architecture for homomorphic computing on encrypted data,” in 2019 IEEE International symposium on high performance computer architecture (HPCA) . IEEE, 2019, pp. 387–398
work page 2019
-
[6]
Cheetah: Optimizing and accelerating homomorphic encryption for private inference,
B. Reagen, W.-S. Choi, Y . Ko, V . T. Lee, H.-H. S. Lee, G.-Y . Wei, and D. Brooks, “Cheetah: Optimizing and accelerating homomorphic encryption for private inference,” in2021 IEEE International Symposium on High-Performance Computer Architecture (HPCA). IEEE, 2021, pp. 26–39
work page 2021
-
[7]
Heax: An architecture for computing on encrypted data,
M. S. Riazi et al., “Heax: An architecture for computing on encrypted data,” in Proceedings of the twenty-fifth international conference on architectural support for programming languages and operating systems, 2020, pp. 1295–1309
work page 2020
Show all 32 references
-
[8]
Fhemem: A processing in-memory accelerator for fully homomorphic encryption,
M. Zhou, Y . Nam, P. Gangwar, W. Xu, A. Dutta, K. Subramanyam, C. Wilkerson, R. Cammarota, S. Gupta, and T. Rosing, “Fhemem: A processing in-memory accelerator for fully homomorphic encryption,” arXiv preprint arXiv:2311.16293 , 2023
2023 arXiv
-
[9]
Efficient k-parallel pipelined ntt architecture for post quantum cryptography,
P. Duong-Ngoc et al. , “Efficient k-parallel pipelined ntt architecture for post quantum cryptography,” in 2020 International SoC Design Conference (ISOCC), 2020, pp. 212–213
2020
-
[10]
Sok: Fully homomorphic encryption accelerators,
J. Zhang et al., “Sok: Fully homomorphic encryption accelerators,” ACM Computing Surveys, 2022
2022
-
[11]
Spacx: Silicon photonics-based scalable chiplet acceler- ator for dnn inference,
Y . Li et al. , “Spacx: Silicon photonics-based scalable chiplet acceler- ator for dnn inference,” in IEEE International Symposium on High- Performance Computer Architecture (HPCA) , 2022, pp. 831–845
2022
-
[12]
An algorithm for the machine calculation of complex fourier series,
J. W. Cooley and J. W. Tukey, “An algorithm for the machine calculation of complex fourier series,” Mathematics of computation, vol. 19, no. 90, pp. 297–301, 1965
1965
-
[13]
Fast fourier transforms: for fun and profit,
W. M. Gentleman and G. Sande, “Fast fourier transforms: for fun and profit,” in Proceedings of the November 7-10, 1966, fall joint computer conference, 1966, pp. 563–578
1966
-
[14]
Gentry, A fully homomorphic encryption scheme
C. Gentry, A fully homomorphic encryption scheme. Stanford university, 2009
2009
-
[15]
Over 100x faster bootstrapping in fully homomorphic encryption through memory- centric optimization with gpus,
W. Jung, S. Kim, J. H. Ahn, J. H. Cheon, and Y . Lee, “Over 100x faster bootstrapping in fully homomorphic encryption through memory- centric optimization with gpus,” IACR Transactions on Cryptographic Hardware and Embedded Systems , pp. 114–148, 2021
2021
-
[16]
Tensorfhe: Achieving practical computation on encrypted data using gpgpu,
S. Fan, Z. Wang, W. Xu, R. Hou, D. Meng, and M. Zhang, “Tensorfhe: Achieving practical computation on encrypted data using gpgpu,” in 2023 IEEE International Symposium on High-Performance Computer Architecture (HPCA). IEEE, 2023, pp. 922–934
2023
-
[17]
Poseidon: Practical homomorphic encryption accelerator,
Y . Yang, H. Zhang, S. Fan, H. Lu, M. Zhang, and X. Li, “Poseidon: Practical homomorphic encryption accelerator,” in 2023 IEEE Interna- tional Symposium on High-Performance Computer Architecture (HPCA). IEEE, 2023, pp. 870–881
2023
-
[18]
Fab: An fpga-based accel- erator for bootstrappable fully homomorphic encryption,
R. Agrawal, L. de Castro, G. Yang, C. Juvekar, R. Yazicigil, A. Chan- drakasan, V . Vaikuntanathan, and A. Joshi, “Fab: An fpga-based accel- erator for bootstrappable fully homomorphic encryption,” in 2023 IEEE International Symposium on High-Performance Computer Architecture ...
2023
-
[19]
Ark: Fully homomorphic encryption accelerator with runtime data generation and inter-operation key reuse,
J. Kim, G. Lee, S. Kim, G. Sohn, M. Rhu, J. Kim, and J. H. Ahn, “Ark: Fully homomorphic encryption accelerator with runtime data generation and inter-operation key reuse,” in 2022 55th IEEE/ACM International Symposium on Microarchitecture (MICRO) . IEEE, 2022, pp. 1237– 1254
2022
-
[20]
Craterlake: a hardware accelerator for efficient unbounded computation on encrypted data,
N. Samardzic, A. Feldmann, A. Krastev, N. Manohar, N. Genise, S. Devadas, K. Eldefrawy, C. Peikert, and D. Sanchez, “Craterlake: a hardware accelerator for efficient unbounded computation on encrypted data,” in Proceedings of the 49th Annual International Symposium on Computer...
2022
-
[21]
Cryptgpu: Fast privacy- preserving machine learning on the gpu,
S. Tan, B. Knott, Y . Tian, and D. J. Wu, “Cryptgpu: Fast privacy- preserving machine learning on the gpu,” in 2021 IEEE Symposium on Security and Privacy (SP) . IEEE, 2021, pp. 1021–1038
2021
-
[22]
F1: A fast and programmable acceler- ator for fully homomorphic encryption,
N. Samardzic, A. Feldmann, A. Krastev, S. Devadas, R. Dreslinski, C. Peikert, and D. Sanchez, “F1: A fast and programmable acceler- ator for fully homomorphic encryption,” in MICRO-54: 54th Annual IEEE/ACM International Symposium on Microarchitecture , 2021, pp. 238–252
2021
-
[23]
Bts: An accelerator for bootstrappable fully homomorphic encryption,
S. Kim, J. Kim, M. J. Kim, W. Jung, J. Kim, M. Rhu, and J. H. Ahn, “Bts: An accelerator for bootstrappable fully homomorphic encryption,” in Proceedings of the 49th annual international symposium on computer architecture, 2022, pp. 711–725
2022
-
[24]
Does fully homomorphic encryption need compute acceleration?
L. de Castro, R. Agrawal, R. Yazicigil, A. Chandrakasan, V . Vaikun- tanathan, C. Juvekar, and A. Joshi, “Does fully homomorphic encryption need compute acceleration?” arXiv preprint arXiv:2112.06396 , 2021
2021 arXiv
-
[25]
(2024, November) Jedec publishes hbm3 update to the high bandwidth memory (hbm) standard
JEDEC. (2024, November) Jedec publishes hbm3 update to the high bandwidth memory (hbm) standard. Accessed: 2024-11-
2024
-
[26]
Available: https://www.jedec.org/news/pressreleases/jedec- publishes-hbm3-update-high-bandwidth-memory-hbm-standard
[Online]. Available: https://www.jedec.org/news/pressreleases/jedec- publishes-hbm3-update-high-bandwidth-memory-hbm-standard
-
[28]
Designing low-power, low- latency networks-on-chip by optimally combining electrical and optical links,
S. Werner, J. Navaridas, and M. Luj ´an, “Designing low-power, low- latency networks-on-chip by optimally combining electrical and optical links,” in 2017 IEEE International Symposium on High Performance Computer Architecture (HPCA). IEEE, 2017, pp. 265–276
2017
-
[29]
Nvidia a100 tensor core gpu: Performance and innovation,
J. Choquette, W. Gandhi, O. Giroux, N. Stam, and R. Krashinsky, “Nvidia a100 tensor core gpu: Performance and innovation,” IEEE Micro, vol. 41, no. 2, pp. 29–35, 2021
2021
-
[30]
Silicon-photonic clos networks for global on-chip communication,
A. Joshi, C. Batten, Y .-J. Kwon, S. Beamer, I. Shamim, K. Asanovic, and V . Stojanovic, “Silicon-photonic clos networks for global on-chip communication,” in 2009 3rd ACM/IEEE International Symposium on Networks-on-Chip. IEEE, 2009, pp. 124–133
2009
-
[31]
A 10gb/s si-photonic transceiver with 150 µw 120 µs-lock-time digitally supervised analog microring wavelength stabilization for 1tb/s/mm 2 die- to-die optical networks,
Y . Thonnart, M. Zid, J. L. Gonzalez-Jimenez, G. Waltener, R. Polster, O. Dubray, F. Lepin, S. Bernab ´e, S. Menezo, G. Par `es et al. , “A 10gb/s si-photonic transceiver with 150 µw 120 µs-lock-time digitally supervised analog microring wavelength stabilization for 1tb/s/mm 2...
2018
-
[32]
40 gb/s thermally tunable cmos ring modulator,
G. Li, X. Zheng, H. Thacker, J. Yao, Y . Luo, I. Shubin, K. Raj, J. E. Cunningham, and A. V . Krishnamoorthy, “40 gb/s thermally tunable cmos ring modulator,” in The 9th International Conference on Group IV Photonics (GFP) . IEEE, 2012, pp. 1–3. DISTRIBUTION STATEMENT A. Appro...
2012
Reviewed August 7, 2026 · model on record in the stance chip above.
Discussion (0). Sign in to comment.