Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper addresses the vulnerabilities in encrypted multi-agent control systems, specifically focusing on the leakage of information due to decryption noise in approximate homomorphic encryption (CKKS). By modeling the security challenges as a two-phase game involving passive reconnaissance and active manipulation, the authors propose a re-keying strategy to mitigate the risks associated with persistent threats. The key finding reveals that the frequency of re-keying must be dynamically adjusted based on the fragility of the control graph topology, balancing the trade-offs between encryption precision, control accuracy, and security.
Re-keying emerges as a critical defense mechanism in encrypted control systems, revealing a delicate balance between security and operational efficiency.
Encrypted control lets a cloud coordinate a fleet of agents on fully homomorphically encrypted state, keeping their positions and commands private. The approximate scheme for real-valued control, CKKS, returns decryptions that carry the encryption noise, a key-recovery leak; the loop must decrypt to actuate, so the leak is unavoidable. Yet the security of approximate FHE is studied statically, encrypted control assumes an honest-but-curious cloud, and persistent-threat games never reach inside the cryptosystem. We model the loop's security under an advanced persistent threat as a two-phase game, passive reconnaissance then active manipulation, separated by a measured residual detector that sees only the manipulation. The passive phase reduces to the known flooding tradeoff; the active defense is re-keying, not bootstrapping, since only re-keying resets accumulated leakage. The active phase is a detection-evasion timing game: overt manipulation is caught, so the rational adversary stays stealthy, and at its Stackelberg equilibrium the defender re-keys on the laziest cadence that denies it, set by the control-theoretic fragility of the graph topology. The marginally-stable graph must re-key far more often than the well-connected one. A three-way tension among FHE precision, control accuracy, and re-key cadence sets where this game lives, between a securability floor and a static-suffices ceiling. The efficient secure point is that window, where re-keying is the price of precision efficiency. More broadly, security for an approximate cryptosystem in a feedback loop is a dynamic game whose defender's move is the scheme's own refresh, applying beyond control to any system that must repeatedly decrypt to act.