Digital Locker
A cryptographic primitive that binds secret information to a key, such that the original information can be recovered only by providing an exactly matching input. Its security relies on cryptographic assumptions such as pseudorandom functions, and it can be used to protect arbitrary secret data, including neural network weights.
Timeline (last 90 days)
A study constructs a backdoor attack that embeds an encrypted neural network into the weights of a host model, where the hidden circuit is decrypted and executed only upon receiving a specific key trigger.
The core technique of this study is digital lockers, a cryptographic primitive that can lock information so that it can only be unlocked by providing the correct key.
The security of digital lockers typically relies on cryptographic assumptions such as pseudorandom functions (PRFs), rather than on the difficulty of finding where information is hidden.
Traditional backdoor attacks rely on statistical regularities in the training data distribution and can in principle be identified by gradient analysis or anomaly detection, whereas the digital locker mechanism provides computationally indistinguishability guarantees.
All Facts (4)
A study constructs a backdoor attack that embeds an encrypted neural network into the weights of a host model, where the hidden circuit is decrypted and executed only upon receiving a specific key trigger.
50%UnverifiedThe core technique of this study is digital lockers, a cryptographic primitive that can lock information so that it can only be unlocked by providing the correct key.
50%UnverifiedThe security of digital lockers typically relies on cryptographic assumptions such as pseudorandom functions (PRFs), rather than on the difficulty of finding where information is hidden.
50%UnverifiedTraditional backdoor attacks rely on statistical regularities in the training data distribution and can in principle be identified by gradient analysis or anomaly detection, whereas the digital locker mechanism provides computationally indistinguishability guarantees.
50%