Abstract:Homomorphic encryption is one of the main solutions for building secure and privacy-preserving solutions for Machine Learning as a Service. This motivates the development of homomorphic algorithms for the main building blocks of AI, typically for the components of the various types of neural networks architectures. Among those components, we focus on the Softmax function, defined by $\mathrm{SM}(\mathbf{x}) = \left(\exp(x_i) / \sum_{j=1}^n \exp(x_j) \right)_{1\le i\le n}$. This function is deemed to be one of the most difficult to evaluate homomorphically, because of its multivariate nature and of the very large range of values for $\exp(x_i)$. The available homomorphic algorithms remain restricted, especially in large dimensions, while important applications such as Large Language Models (LLM) require computing Softmax over large dimensional vectors. In terms of multiplicative depth of the computation (a suitable measure of cost for homomorphic algorithms), our algorithm achieves $O(\log n)$ complexity for a fixed range of inputs, where $n$ is the Softmax dimension. Our algorithm is especially adapted to the situation where we must compute many Softmax at the same time, for instance, in the LLM situation. In that case, assuming that all Softmax calls are packed into $m$ ciphtertexts, the asymptotic amortized multiplicative depth cost per ciphertext is, again over a fixed range, $O(1 + m/N)$ for $N$ the homomorphic ring degree. The main ingredient of our algorithms is a normalize-and-square strategy, which interlaces the exponential computation over a large range and normalization, decomposing both in stabler and cheaper smaller steps. Comparing ourselves to the state of the art, our experiments show, in practice, a good accuracy and a gain of a factor 2.5 to 8 compared to state of the art solutions.

Online normalizer calculation for softmax

A Low-Power In-Memory Multiplication and Accumulation Array with Modified Radix-4 Input and Canonical Signed Digit Weights

Softmax Optimizations for Intel Xeon Processor-based Platforms

2 β-softmax: A Hardware-Friendly Activation Function with Low Complexity and High Performance

Hardware-Efficient SoftMax Architecture With Bit-Wise Exponentiation and Reciprocal Calculation

Fast and Accurate Homomorphic Softmax Evaluation

ConSmax: Hardware-Friendly Alternative Softmax with Learnable Parameters

Hyft: A Reconfigurable Softmax Accelerator with Hybrid Numeric Format for both Training and Inference

Base-2 Softmax Function: Suitability for Training and Efficient Hardware Implementation

MultiMax: Sparse and Multi-Modal Attention Learning

Topkima-Former: Low-energy, Low-Latency Inference for Transformers using top-k In-memory ADC

Exploring the Frontiers of Softmax: Provable Optimization, Applications in Diffusion Model, and Beyond

Efficient Hardware Architecture of Softmax Layer in Deep Neural Network

Money on the Table: Statistical information ignored by Softmax can improve classifier accuracy

Softmax-Free Linear Transformers

SoftmAP: Software-Hardware Co-design for Integer-Only Softmax on Associative Processors

Optimization of Softmax Layer in Deep Neural Network Using Integral Stochastic Computation

SSN: Learning Sparse Switchable Normalization via SparsestMax

softmax is not enough (for sharp out-of-distribution)

Sigsoftmax: Reanalysis of the Softmax Bottleneck