REVIEW 3 major objections 5 minor 49 references
LibFHE: A Numba-Based CUDA-Python Library for Non-RNS CKKS-BGV Fully Homomorphic Encryption on GPUs
T0 review · 3 major / 5 minor · reviewed 2026-07-14 · grok-4.5
Pith's one-line read Optimized CUDA-Python can match CPU C++ speed for original non-RNS CKKS-BGV fully homomorphic encryption while staying pure Python.
desk verdict Solid pure-Python GPU non-RNS CKKS-BGV library with real engineering work, but the headline "comparable to CPU C++" claim has no baselines. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
Hybrid limb/RNS pipeline with CipherTensor batching: coefficients live in 32-bit limbs for flexible arithmetic; they are converted in-place only for NTT-domain multiplications, then reconstructed via Garner's mixed-radix CRT, all driven from Numba JIT kernels that amortize work across multiple ciphertexts.
What would settle it
Run the same non-RNS CKKS-BGV parameter set (N=2^16, log Q=1024, same precision and slot counts) on a published CPU C++ non-RNS library and on LibFHE, then check whether amortized per-ciphertext latencies for multiply, rotate, and bootstrap are within a small constant factor of each other.
Extended reading notes
Core claim
An optimized pure-Python CUDA implementation of the original non-RNS CKKS-BGV scheme can reach performance comparable to highly optimized CPU-based non-RNS C++ FHE libraries, while cutting implementation complexity and improving programmability for AI/ML workflows.
Load-bearing premise
That the self-reported Tesla T4 latencies under the chosen parameters already prove the library is competitive with existing CPU C++ non-RNS libraries, even though no side-by-side numbers or named baselines appear.
Signed reviews
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. LibFHE is a Numba/CUDA-Python library that implements the original (non-RNS) CKKS-BGV scheme on GPUs. The authors argue that RNS-CKKS forces rigid modulus chains and 64-bit arithmetic poorly matched to GPU datapaths, while a limb-based radix representation plus temporary RNS/NTT only for multiplication restores dynamic scale control and simplifies kernel fusion. They describe a hybrid limb↔RNS pipeline (Garner reconstruction, precomputed twiddles, matrix four-step NTT, Karatsuba), a CipherTensor batch abstraction with pairwise/broadcast modes, and a HEAAN-style API. Table 1 reports absolute latencies on a Tesla T4 (N=2^16, log Q=1024, cnum=4), including amortized bootstrap ~58 s. The central claim is that this optimized CUDA-Python Non-RNS design reaches performance comparable to highly optimized CPU Non-RNS C++ libraries while improving programmability and AI/ML integration.
Significance. If the comparability claim were substantiated, the work would be a useful systems contribution: a pure-Python, wrapper-free FHE path that reclaims original-CKKS precision flexibility and lowers the barrier for encrypted ML. The hybrid representation, CipherTensor batching, and explicit Non-RNS motivation are concrete engineering ideas. The manuscript also ships a public Colab notebook and states an intent to open-source, which supports reproducibility. At present, however, the significance is limited by the absence of any named Non-RNS C++ baseline under matched parameters, so the headline claim remains unfalsifiable.
major comments (3)
- Abstract, §1.3 and §8 assert that optimized CUDA-Python Non-RNS implementations achieve performance comparable to highly optimized CPU-based Non-RNS C++ FHE libraries. Table 1 and §7 report only absolute Tesla T4 latencies (amortized bootstrap ~58 s, mult ~2 s) under N=2^16, log Q=1024, cnum=4. No named Non-RNS C++ baseline (original HEAAN or equivalent), no identical parameter set, and no side-by-side CPU timings appear. Without that anchor the word “comparable” is unfalsifiable; absolute numbers alone cannot establish the claim. A matched-parameter comparison (or an explicit retraction of the comparability language) is required.
- §7.2.1 and Table 1: bootstrapping is the dominant cost and the only full-FHE operation, yet it is reported solely as wall-clock latency with no noise-growth, precision, or correctness metrics after refresh, and no comparison to any published Non-RNS or RNS bootstrap figure under the same (log p=30, log q=40, log T=2) setting. The central “Full Homomorphic Encryption” claim therefore rests on an uncontextualized absolute number.
- §4.1.3 and §5.1: the hybrid limb↔RNS design is presented as the key enabler of Non-RNS flexibility, but the manuscript supplies no micro-benchmarks isolating conversion cost versus pure-RNS or pure-limb baselines, nor any measurement of the claimed “negligible bandwidth” of the in-place shared-memory transform. Without those numbers the architectural advantage remains qualitative.
minor comments (5)
- §1.1 and Abstract open with an unsupported claim that “there is still no indicator pointing toward a fifth-generation successor”; this rhetorical framing is unnecessary and should be removed or substantiated.
- Table 1 caption and §7.2.2: clarify that all times are post-JIT warm-up and that amortized figures are total/cnum, not single-ciphertext latency.
- §6.2.2 lists riterotate_broadcast_into as “To Be Done”; either implement it or remove the stub from the public API description.
- Notation for CipherTensor attributes (log p, log q, log s) is introduced late; a short parameter table early in §6 would help.
- Several related-work citations (Cheddar, WarpDrive, TensorFHE) are discussed only qualitatively; a short quantitative comparison table, even if only for NTT or mult, would strengthen §1.2.
Circularity Check
No circularity: systems paper reports direct GPU latency measurements of a known non-RNS CKKS-BGV scheme; nothing is derived from fitted inputs or self-definitional equations.
full rationale
LibFHE is an engineering contribution that reimplements the original (non-RNS) CKKS-BGV scheme in Numba CUDA-Python, describes hybrid limb/RNS pipelines, NTT optimizations, and CipherTensor batching, then reports absolute wall-clock latencies on a Tesla T4 (Table 1). There are no first-principles derivations, no fitted parameters that reappear as predictions, no uniqueness theorems, and no load-bearing self-citations. The performance claim is an empirical assertion about measured times versus (unnamed) CPU Non-RNS C++ libraries; any weakness in that comparison is an evidence gap, not circularity by construction. The paper is self-contained as a systems artifact and exhibits none of the six circular patterns.
Assumptions & free parameters
free parameters (5)
- polynomial degree N =
2^16
- ciphertext modulus bit-length log Q =
1024
- RNS prime bit-width =
30-31 bits
- CipherTensor batch size cnum =
4
- scaling factor log p / log T for bootstrapping =
log p=30, log T=2
assumptions (5)
- standard math Negacyclic NTT exists and is correct for primes q ≡ 1 mod 2N
- standard math Garner’s mixed-radix algorithm correctly reconstructs the unique integer from RNS residues
- domain assumption IEEE-754 double mantissa is insufficient for large non-RNS moduli, forcing limb or RNS representation
- domain assumption Numba JIT + cuda-python bindings can emit kernels whose throughput approaches hand-written CUDA C++
- ad hoc to paper In-place limb ↔ RNS conversion inside shared memory has negligible bandwidth cost relative to NTT
invented entities (2)
-
LibFHE library
-
CipherTensor
Cite this review
Pith. "Pith review of LibFHE: A Numba-Based CUDA-Python Library for Non-RNS CKKS-BGV Fully Homomorphic Encryption on GPUs." pith.science (2026). https://pith.science/paper/YKHXVVE4
@misc{pith2026260705920,
author = {Pith},
title = {Pith review of: LibFHE: A Numba-Based CUDA-Python Library for Non-RNS CKKS-BGV Fully Homomorphic Encryption on GPUs},
year = {2026},
howpublished = {\url{https://pith.science/paper/YKHXVVE4}},
note = {Machine review of arXiv:2607.05920}
}
read the original abstract
It has been a decade since the fourth-generation FHE framework, CKKS, was proposed; yet, there is still no indicator pointing toward a fifth-generation successor; and in recent years, numerous studies have explored GPU acceleration to improve the efficiency of homomorphic computations. In this paper, we propose LibFHE, a high-performance GPU-accelerated framework that features CUDA-Python bindings to achieve both high-level programmability and bare-metal GPU performance for homomorphic workloads. A large majority of state-of-the-art implementations adopt the RNS-CKKS variant. In contrast, this work deliberately revisits the original (non-RNS) CKKS-BGV framework, and develops a GPU-based implementation along with corresponding optimizations. Experimental results demonstrate that optimized CUDA-Python implementations can achieve performance comparable to highly optimized CPU-based C++ FHE libraries, while significantly reducing implementation complexity and improving programmability.
Reference graph
Works this paper leans on
-
[1]
Rashmi Agrawal, Leo De Castro, Guowei Yang, Chiraag Juvekar, Rabia Yazicigil, Anantha Chandrakasan, Vinod Vaikuntanathan, and Ajay Joshi. 2023. FAB: An FPGA-based accelerator for bootstrappable fully homomorphic encryption. In 2023 IEEE International symposium on high-performance computer architecture (HPCA). IEEE, 882–895
2023
-
[2]
Ahmad Al Badawi, Jack Bates, Flavio Bergamaschi, David Bruce Cousins, Saroja Erabelli, Nicholas Genise, Shai Halevi, Hamish Hunt, Andrey Kim, Yongwoo Lee, et al. 2022. Openfhe: Open-source fully homomorphic encryption library. In proceedings of the 10th workshop on encrypted computing & applied homomorphic cryptography. 53–63
2022
-
[3]
Ahmad Al Badawi and Yuriy Polyakov. 2023. Demystifying bootstrapping in fully homomorphic encryption.Cryptology eprint archive(2023)
2023
-
[4]
Martin Albrecht, Melissa Chase, Hao Chen, Jintai Ding, Shafi Goldwasser, Sergey Gorbunov, Shai Halevi, Jeffrey Hoffstein, Kim Laine, Kristin Lauter, et al. 2022. Homomorphic encryption standard. InProtecting privacy through homomorphic encryption. Springer, 31–62
2022
-
[5]
2011.Algebra
Michael Artin. 2011.Algebra. Pearson Prentice Hall. https://books.google.com. ph/books?id=S6GSAgAAQBAJ
2011
-
[6]
Hao Chen, Kim Laine, and Rachel Player. 2017. Simple encrypted arithmetic library-SEAL v2. 1. InInternational conference on financial cryptography and data security. Springer, 3–18
2017
-
[7]
Jung Hee Cheon, Hyeongmin Choe, Minsik Kang, Jaehyung Kim, Seonghak Kim, Johannes Mono, and Taeyeong Noh. 2025. Grafting: decoupled scale factors and modulus in RNS-CKKS. InProceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security. 1098–1112
2025
-
[8]
Jung Hee Cheon, Andrey Kim, Miran Kim, and Yongsoo Song. 2017. Homo- morphic encryption for arithmetic of approximate numbers. InInternational conference on the theory and application of cryptology and information security. Springer, 409–437
2017
Show all 49 references
-
[9]
Wonseok Choi, Jongmin Kim, and Jung Ho Ahn. 2026. Cheddar: A swift fully homomorphic encryption library designed for gpu architectures. InProceedings of 14 LibFHE: A Numba-Based CUDA-Python Library for Non-RNS CKKS-BGV Fully Homomorphic Encryption on GPUs Table 1: Execution la...
2026
-
[10]
Sultan Durrani, Muhammad Saad Chughtai, Mert Hidayetoglu, Rashid Tahir, Abdul Dakkak, Lawrence Rauchwerger, Fareed Zaffar, and Wen-mei Hwu. 2021. Accelerating fourier and number theoretic transforms using tensor cores and warp shuffles. In2021 30th International conference on ...
2021
-
[11]
Guang Fan, Mingzhe Zhang, Fangyu Zheng, Shengyu Fan, Tian Zhou, Xiang- long Deng, Wenxu Tang, Liang Kong, Yixuan Song, and Shoumeng Yan. 2025. Warpdrive: Gpu-based fully homomorphic encryption acceleration leveraging tensor and cuda cores. In2025 IEEE International Symposium o...
2025
-
[12]
Guang Fan, Fangyu Zheng, Lipeng Wan, Lili Gao, Yuan Zhao, Jiankuo Dong, Yixuan Song, Yuewu Wang, and Jingqiang Lin. 2023. Towards faster fully homo- morphic encryption implementation with integer and floating-point computing power of GPUs. In2023 IEEE International Parallel an...
2023
-
[13]
Shengyu Fan, Zhiwei Wang, Weizhi Xu, Rui Hou, Dan Meng, and Mingzhe Zhang
-
[14]
In2023 IEEE International Symposium on High-Performance Computer Architecture (HPCA)
Tensorfhe: Achieving practical computation on encrypted data using gpgpu. In2023 IEEE International Symposium on High-Performance Computer Architecture (HPCA). IEEE, 922–934
-
[15]
Craig Gentry. 2009. Fully homomorphic encryption using ideal lattices. In Proceedings of the forty-first annual ACM symposium on Theory of computing. 169–178. doi:10.1145/1536414.1536440
2009 doi
-
[16]
Craig Gentry, Shai Halevi, and Nigel P Smart. 2012. Homomorphic evaluation of the AES circuit. InAnnual Cryptology Conference. Springer, 850–867
2012
-
[17]
Jia-Zheng Goey, Wai-Kong Lee, Bok-Min Goi, and Wun-She Yap. 2021. Accel- erating number theoretic transform in GPU platform for fully homomorphic encryption: J.-Z. Goey et al.The Journal of Supercomputing77, 2 (2021), 1455– 1474
2021
-
[18]
Kyoohyung Han, Seungwan Hong, Jung Hee Cheon, and Daejun Park. 2019. Logistic regression on homomorphic encrypted data at scale. InProceedings of the AAAI conference on artificial intelligence, Vol. 33. 9466–9471
2019
-
[19]
Kyoohyung Han, Seungwan Hong, Jung Hee Cheon, and Daejun Park. 2019. Logistic regression on homomorphic encrypted data at scale. InProceedings of the AAAI Conference on Artificial Intelligence, Vol. 33. 9466–9471. doi:10.1609/ aaai.v33i01.33019466
2019
-
[20]
Yi Huang, Xinsheng Gong, Xiangyu Kong, Dibei Chen, Jianfeng Zhu, Wenping Zhu, Liangwei Li, Mingyu Gao, Shaojun Wei, Aoyang Zhang, et al. 2025. EFFACT: A highly efficient full-stack FHE acceleration platform. In2025 IEEE International Symposium on High Performance Computer Arch...
2025
-
[21]
Angela Jäschke and Frederik Armknecht. 2016. Accelerating homomorphic com- putations on rational numbers. InInternational Conference on Applied Cryptogra- phy and Network Security. Springer, 405–423. doi:10.1007/978-3-319-39555-5_22
2016 doi
-
[22]
Wonkyung Jung, Sangpyo Kim, Jung Ho Ahn, Jung Hee Cheon, and Younho Lee
-
[23]
Over 100x faster bootstrapping in fully homomorphic encryption through memory-centric optimization with GPUs.IACR Transactions on Cryptographic Hardware and Embedded Systems(2021), 114–148
2021
-
[24]
Wonkyung Jung, Eojin Lee, Sangpyo Kim, Jongmin Kim, Namhoon Kim, Keewoo Lee, Chohong Min, Jung Hee Cheon, and Jung Ho Ahn. 2021. Accelerating fully homomorphic encryption through architecture-centric analysis and optimization. IEEE Access9 (2021), 98772–98789
2021
-
[25]
Andrey Kim, Yongsoo Song, Miran Kim, Keewoo Lee, and Jung Hee Cheon. 2018. Logistic regression model training based on the approximate homomorphic encryption.BMC medical genomics11, 4 (2018), 83. doi:10.1186/s12920-018-0401- 7
2018 doi
-
[26]
Jongmin Kim, Sangpyo Kim, Jaewan Choi, Jaiyoung Park, Donghwan Kim, and Jung Ho Ahn. 2023. SHARP: A short-word hierarchical accelerator for robust and practical fully homomorphic encryption. InProceedings of the 50th Annual International Symposium on Computer Architecture. 1–15
2023
-
[27]
Jongmin Kim, Gwangho Lee, Sangpyo Kim, Gina Sohn, Minsoo Rhu, John Kim, and Jung Ho Ahn. 2022. Ark: Fully homomorphic encryption accelerator with runtime data generation and inter-operation key reuse. In2022 55th IEEE/ACM International Symposium on Microarchitecture (MICRO). I...
2022
-
[28]
Jongmin Kim, Sungmin Yun, Hyesung Ji, Wonseok Choi, Sangpyo Kim, and Jung Ho Ahn. 2025. Anaheim: Architecture and Algorithms for Processing Fully Homomorphic Encryption in Memory. In2025 IEEE International Symposium on High Performance Computer Architecture (HPCA). IEEE, 1158–1173
2025
-
[29]
Miran Kim, Yongsoo Song, Shuang Wang, Yuhou Xia, and Xiaoqian Jiang. 2018. Secure logistic regression based on homomorphic encryption: Design and evalu- ation.JMIR medical informatics6, 2 (2018), e19. doi:10.2196/medinform.8805
2018 doi
-
[30]
Sangpyo Kim, Wonkyung Jung, Jaiyoung Park, and Jung Ho Ahn. 2020. Ac- celerating number theoretic transformations for bootstrappable homomorphic encryption on GPUs.arXiv preprint arXiv:2012.01968(2020)
2020 arXiv
-
[31]
Sangpyo Kim, Jongmin Kim, Michael Jaemin Kim, Wonkyung Jung, John Kim, Minsoo Rhu, and Jung Ho Ahn. 2022. Bts: An accelerator for bootstrappable fully homomorphic encryption. InProceedings of the 49th annual international symposium on computer architecture. 711–725
2022
-
[32]
Eunsang Lee, Joon-Woo Lee, Junghyun Lee, Young-Sik Kim, Yongjune Kim, Jong-Seon No, and Woosuk Choi. 2022. Low-complexity deep convolutional neural networks on fully homomorphic encryption using multiplexed parallel convolutions. InInternational Conference on Machine Learning....
2022
-
[33]
Wai-Kong Lee, Sedat Akleylek, Denis Chee-Keong Wong, Wun-She Yap, Bok- Min Goi, and Seong-Oun Hwang. 2021. Parallel implementation of Nussbaumer algorithm and number theoretic transform on a GPU platform: application to qTESLA: W.-K. Lee et al.The Journal of Supercomputing77, ...
2021
-
[34]
Ali Şah Özcan and Erkay Savaş. 2024. HEonGPU: a GPU-based fully homomor- phic encryption library 1.0.Cryptology ePrint Archive(2024)
2024
-
[35]
Jaiyoung Park, Donghwan Kim, Jongmin Kim, Sangpyo Kim, Wonkyung Jung, Jung Hee Cheon, and Jung Ho Ahn. 2023. Toward practical privacy-preserving convolutional neural networks exploiting fully homomorphic encryption.arXiv preprint arXiv:2310.16530(2023)
2023 arXiv
-
[36]
M Sadegh Riazi, Kim Laine, Blake Pelton, and Wei Dai. 2020. HEAX: An ar- chitecture for computing on encrypted data. InProceedings of the twenty-fifth international conference on architectural support for programming languages and operating systems. 1295–1309
2020
-
[37]
Sujoy Sinha Roy, Furkan Turan, Kimmo Jarvinen, Frederik Vercauteren, and Ingrid Verbauwhede. 2019. FPGA-based high-performance parallel architec- ture for homomorphic computing on encrypted data. In2019 IEEE International symposium on high performance computer architecture (HP...
2019
-
[38]
Nikola Samardzic, Axel Feldmann, Aleksandar Krastev, Srinivas Devadas, Ronald Dreslinski, Christopher Peikert, and Daniel Sanchez. 2021. F1: A fast and pro- grammable accelerator for fully homomorphic encryption. InMICRO-54: 54th Annual IEEE/ACM International Symposium on Micr...
2021
-
[39]
Nikola Samardzic, Axel Feldmann, Aleksandar Krastev, Nathan Manohar, Nicholas Genise, Srinivas Devadas, Karim Eldefrawy, Chris Peikert, and Daniel Sanchez. 2022. Craterlake: a hardware accelerator for efficient unbounded com- putation on encrypted data. InProceedings of the 49...
2022
-
[40]
Nikola Samardzic and Daniel Sanchez. 2024. Bitpacker: Enabling high arithmetic efficiency in fully homomorphic encryption accelerators. InProceedings of the 29th ACM International Conference on Architectural Support for Programming Languages and Operating Systems, Volume 2. 137–150
2024
-
[41]
Shiyu Shen, Hao Yang, Yu Liu, Zhe Liu, and Yunlei Zhao. 2022. CARM: CUDA- accelerated RNS multiplication in word-wise homomorphic encryption schemes for internet of things.IEEE Trans. Comput.72, 7 (2022), 1999–2010
2022
-
[42]
Kaustubh Shivdikar, Yuhui Bao, Rashmi Agrawal, Michael Shen, Gilbert Jonatan, Evelio Mora, Alexander Ingare, Neal Livesay, José L Abellán, John Kim, et al
-
[43]
InProceedings of the 56th Annual IEEE/ACM International Symposium on Microarchitecture
Gme: Gpu-based microarchitectural extensions to accelerate homomorphic encryption. InProceedings of the 56th Annual IEEE/ACM International Symposium on Microarchitecture. 670–684
-
[44]
Kaustubh Shivdikar, Gilbert Jonatan, Evelio Mora, Neal Livesay, Rashmi Agrawal, Ajay Joshi, José L Abellán, John Kim, and David Kaeli. 2022. Accelerating polynomial multiplication for homomorphic encryption on GPUs. In2022 IEEE International Symposium on Secure and Private Exe...
2022
-
[45]
Nigel P Smart and Frederik Vercauteren. 2014. Fully homomorphic SIMD opera- tions.Designs, codes and cryptography71, 1 (2014), 57–81
2014
-
[46]
Hao Yang, Shiyu Shen, Wangchen Dai, Lu Zhou, Zhe Liu, and Yunlei Zhao. 2024. Phantom: A cuda-accelerated word-wise homomorphic encryption library.IEEE Transactions on Dependable and Secure Computing21, 5 (2024), 4895–4906
2024
-
[47]
Yinghao Yang, Huaizhi Zhang, Shengyu Fan, Hang Lu, Mingzhe Zhang, and Xiaowei Li. 2023. Poseidon: Practical homomorphic encryption accelerator. In 2023 IEEE International Symposium on High-Performance Computer Architecture (HPCA). IEEE, 870–881
2023
-
[48]
Yujia Zhai, Mohannad Ibrahim, Yiqin Qiu, Fabian Boemer, Zizhong Chen, Alexey Titov, and Alexander Lyashevsky. 2022. Accelerating encrypted computing on in- tel gpus. In2022 IEEE International Parallel and Distributed Processing Symposium (IPDPS). IEEE, 705–716
2022
-
[49]
Yilan Zhu, Xinyao Wang, Lei Ju, and Shanqing Guo. 2023. FxHENN: FPGA-based acceleration framework for homomorphic encrypted CNN inference. In2023 IEEE International Symposium on High-Performance Computer Architecture (HPCA). IEEE, 896–907. 16
2023
Reviewed July 14, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.