August 14th, 2024

Apple open-sources its Homomorphic Encryption library

Apple has open-sourced its homomorphic encryption library under the Apache 2.0 license, featuring applications in iOS 18, enhancing privacy through encrypted data computations using the quantum-resistant BFV scheme.

Read original articleLink Icon
Apple open-sources its Homomorphic Encryption library

Apple has announced the open-sourcing of its homomorphic encryption (HE) library, which is now available under the Apache 2.0 license. This library includes Swift libraries and executables, showcasing Apple's own implementation and a real-world application in iOS 18 for Live Caller ID Lookup. Homomorphic encryption allows computations on encrypted data without exposing the underlying data, enhancing privacy. Apple's implementation enables encrypted queries to a server for caller ID and spam blocking without revealing the phone number. The library utilizes the Brakerski-Fan-Vercauteren (BFV) scheme, which is quantum resistant. Experts in the field, such as Enveil's CEO, have praised Apple's move, highlighting the potential of HE to transform data usage across various sectors. The release comes amid increasing recognition of Privacy Enhancing Technologies (PETs) by global leaders, emphasizing the importance of secure data handling in a data-driven market. While the HE library provides foundational cryptographic components, experts note that developing a commercial-grade product requires significant additional work in software engineering and algorithm innovation.

- Apple has open-sourced its homomorphic encryption library under the Apache 2.0 license.

- The library includes a real-world application in iOS 18 for Live Caller ID Lookup.

- Homomorphic encryption allows computations on encrypted data, enhancing privacy.

- The library uses the quantum-resistant Brakerski-Fan-Vercauteren scheme.

- Experts emphasize the transformative potential of homomorphic encryption in data usage and security.

Related

Apple admits its AirPods had a security problem

Apple admits its AirPods had a security problem

Apple addressed security vulnerabilities in AirPods and Beats Fit Pro headphones, preventing hackers from pairing devices with the wrong source. The company released updates to enhance customer protection, emphasizing privacy. Apple prioritizes privacy in its products, like Apple Intelligence, and declined AI collaborations with Meta over privacy concerns.

Apple just launched a public demo of its '4M' AI model

Apple just launched a public demo of its '4M' AI model

Apple publicly launches its '4M' AI model with EPFL on Hugging Face Spaces, showcasing versatile capabilities across modalities. The move signals a shift towards transparency, aligning with market growth and emphasizing user privacy amid ethical concerns.

Apple Intelligence's Privacy Stacks Up Against Android's 'Hybrid AI'

Apple Intelligence's Privacy Stacks Up Against Android's 'Hybrid AI'

Apple introduced "Apple Intelligence," an AI system with OpenAI, sparking privacy debates. Apple's Private Cloud Compute prioritizes privacy, contrasting Android's hybrid AI approach. Experts praise Apple's privacy features, but concerns persist over user data security.

Swift Homomorphic Encryption

Swift Homomorphic Encryption

Apple has released an open-source Swift package for homomorphic encryption, enabling secure computations on encrypted data. It enhances privacy for cloud services and supports applications like iOS 18's Live Caller ID Lookup.

Apple memory holed its broken promise for an OCSP opt-out

Apple memory holed its broken promise for an OCSP opt-out

Apple has not fulfilled its promise to provide an opt-out for OCSP checks in macOS, raising privacy concerns. Following macOS 14 Sonoma, it removed related documentation, prompting user skepticism.

Link Icon 8 comments
By @jftuga - 5 months
Link to announcement on swift.org:

https://www.swift.org/blog/announcing-swift-homomorphic-encr...

Intro:

    Homomorphic encryption (HE) is a cryptographic technique that enables computation on encrypted data without revealing the underlying unencrypted data to the operating process. It provides a means for clients to send encrypted data to a server, which operates on that encrypted data and returns a result that the client can decrypt. During the execution of the request, the server itself never decrypts the original data or even has access to the decryption key. Such an approach presents new opportunities for cloud services to operate while protecting the privacy and security of a user’s data, which is obviously highly attractive for many scenarios.
By @supermatou - 5 months
Zero competency in cryptography, so your explanations are much appreciated.

Q: Does this mean that encrypted data (stored files, communications via messengers etc) can be scanned for keywords, without the need to decrypt the entire file/message?

If so, isn't this a huge privacy problem?

By @AlanYx - 5 months
Are there any prominent examples of homomorphic encryption being used at scale in production? I hunted around for some a few years ago but couldn't find any.
By @nalzok - 5 months
I wonder if this has anything to do with Apple Intelligence. Maybe they can have an LLM that operates on encrypted input text without decrypting it, so that users can send sensitive information to an Apple-controlled central server without worrying about privacy issues?
By @batmansmk - 5 months
The idea behind Homomorphic lib is to allow 2 basic operations (such as add, multiply) on encrypted numbers. They return encrypted numbers as well. From those basic operations, we can build more complex functions. That's the gist of the magic.
By @giancarlostoro - 5 months
Can someone explain how this works? I feel like a five year old trying to read Lord of the Rings written in Elvish.
By @op00to - 5 months
This seems like magic to me.