Search papers, labs, and topics across Lattice.
This paper introduces the GKR-HND protocol, which enables secure verification of outsourced Transformer inference by utilizing a registered-model approach to ensure model integrity and execution completeness. The method allows for efficient delegation of expensive computations while maintaining verification through a retained verifier that checks the GKR transcript against the worker's responses. Experimental results demonstrate that the protocol effectively validates pretrained HND models and achieves public computation delegation without the drawbacks of dense-matrix replay.
GKR-HND allows for secure and efficient outsourced Transformer inference, ensuring model integrity without sacrificing computational benefits.
Outsourced Transformer inference exposes clients to model substitution and incomplete execution, while direct replay removes the computational benefit of delegation. We present GKR-HND, a registered-model protocol for verifying the polynomial backbone of Homomorphic--Nonhomomorphic Decomposition Transformers. The retained verifier checks the GKR transcript and registered-weight openings, but delegates expensive public evaluations to an assigned computation worker. Assuming an honest retained verifier and prover--worker non-collusion, the verifier accepts only when the worker's signed, request-bound response agrees with the proof claims. Experiments with pretrained HND models validate the proof path and the delegated public computation without dense-matrix replay.
