Paper 2023/257

Deep Neural Networks for Encrypted Inference with TFHE

Andrei Stoian, Zama
Jordan Frery, Zama
Roman Bredehoft, Zama
Luis Montero, Zama
Celia Kherfallah, Zama
Benoit Chevallier-Mames, Zama

Fully homomorphic encryption (FHE) is an encryption method that allows to perform computation on encrypted data, without decryption. FHE preserves the privacy of the users of online services that handle sensitive data, such as health data, biometrics, credit scores and other personal information. A common way to provide a valuable service on such data is through machine learning and, at this time, Neural Networks are the dominant machine learning model for unstructured data. In this work we show how to construct Deep Neural Networks (DNN) that are compatible with the constraints of TFHE, an FHE scheme that allows arbitrary depth computation circuits. We discuss the constraints and show the architecture of DNNs for two computer vision tasks. We benchmark the architectures using the Concrete stack, an open-source implementation of TFHE.

Available format(s)
Publication info
FHEMachine LearningDeep LearningTFHEPrivacy
Contact author(s)
andrei stoian @ zama ai
2023-02-22: approved
2023-02-22: received
See all versions
Short URL
Creative Commons Attribution


      author = {Andrei Stoian and Jordan Frery and Roman Bredehoft and Luis Montero and Celia Kherfallah and Benoit Chevallier-Mames},
      title = {Deep Neural Networks for Encrypted Inference with {TFHE}},
      howpublished = {Cryptology ePrint Archive, Paper 2023/257},
      year = {2023},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.