google / differential-privacy

Google's differential privacy libraries.
Apache License 2.0
3.08k stars 353 forks source link

Is there a plan to address the issues pointed out in Casacuberta et al? #126

Closed sfc-gh-mholboke closed 2 years ago

sfc-gh-mholboke commented 2 years ago

Is there a plan to address this: floating-point implementations are subject to the vulnerabilities described in Casacuberta et al. "Widespread Underestimation of Sensitivity in Differentially Private Libraries and How to Fix it" (specifically the rounding, repeated rounding, and re-ordering attacks).

senderaleksandr commented 2 years ago

Is there a plan to address this: floating-point implementations are subject to the vulnerabilities described in Casacuberta et al. "Widespread Underestimation of Sensitivity in Differentially Private Libraries and How to Fix it" (specifically the rounding, repeated rounding, and re-ordering attacks).

dibakch commented 2 years ago

There is a workaround using fixed point. We did not come to a good solution as of now and there is more work required. Floating point arithmetic is tricky!