SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

SPU: Secure Processing Unit

SPU (Secure Processing Unit) aims to be a provable, measurable secure computation device, which provides computation ability while keeping your private data protected.

SPU could be treated as a programmable device, it's not designed to be used directly. Normally we use SecretFlow framework, which use SPU as the underline secure computing device.

Currently, we mainly focus on provable security. It contains a secure runtime that evaluates XLA-like tensor operations, which use MPC as the underline evaluation engine to protect privacy information.

SPU python package also contains a simple distributed module to demo SPU usage, but it's NOT designed for production due to system security and performance concerns, please DO NOT use it directly in production.

Contribution Guidelines

If you would like to contribute to SPU, please check Contribution guidelines.

This documentation also contains instructions for build and testing.

Installation Guidelines

Supported platforms

	Linux x86_64	Linux aarch64	macOS x64	macOS Apple Silicon	Windows x64	Windows WSL2 x64
CPU	yes	yes	yes¹	yes	no	yes
NVIDIA GPU	experimental	no	no	n/a	no	no

Due to CI resource limitation, macOS x64 prebuild binary will no longer available since next release (0.9.x).

Instructions

Please follow Installation Guidelines to install SPU.

Hardware Requirements

General Features	FourQ based PSI	GPU
AVX/ARMv8	AVX2/ARMv8	CUDA 11.8+

Citing SPU

If you think SPU is helpful for your research or development, please consider citing our paper:

@inproceedings {spu,
author = {Junming Ma and Yancheng Zheng and Jun Feng and Derun Zhao and Haoqi Wu and Wenjing Fang and Jin Tan and Chaofan Yu and Benyu Zhang and Lei Wang},
title = {{SecretFlow-SPU}: A Performant and {User-Friendly} Framework for {Privacy-Preserving} Machine Learning},
booktitle = {2023 USENIX Annual Technical Conference (USENIX ATC 23)},
year = {2023},
isbn = {978-1-939133-35-9},
address = {Boston, MA},
pages = {17--33},
url = {https://www.usenix.org/conference/atc23/presentation/ma},
publisher = {USENIX Association},
month = jul,
}

Acknowledgement

We thank the significant contributions made by Alibaba Gemini Lab.

Name		Name	Last commit message	Last commit date
.circleci		.circleci
.github		.github
.vscode		.vscode
bazel		bazel
benchmark		benchmark
docs		docs
examples		examples
libspu		libspu
sml		sml
spu		spu
.bazelrc		.bazelrc
.bazelversion		.bazelversion
.clang-format		.clang-format
.clang-tidy		.clang-tidy
.gitattributes		.gitattributes
.gitignore		.gitignore
.markdownlint.yaml		.markdownlint.yaml
BUILD.bazel		BUILD.bazel
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
INSTALLATION.md		INSTALLATION.md
LEGAL.md		LEGAL.md
LICENSE		LICENSE
README.md		README.md
REPO_LAYOUT.md		REPO_LAYOUT.md
SECURITY.md		SECURITY.md
WORKSPACE		WORKSPACE
build_wheel_entrypoint.sh		build_wheel_entrypoint.sh
pyproject.toml		pyproject.toml
renovate.json		renovate.json
requirements-dev.txt		requirements-dev.txt
requirements.txt		requirements.txt
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.circleci		.circleci
.github		.github
.vscode		.vscode
bazel		bazel
benchmark		benchmark
docs		docs
examples		examples
libspu		libspu
sml		sml
spu		spu
.bazelrc		.bazelrc
.bazelversion		.bazelversion
.clang-format		.clang-format
.clang-tidy		.clang-tidy
.gitattributes		.gitattributes
.gitignore		.gitignore
.markdownlint.yaml		.markdownlint.yaml
BUILD.bazel		BUILD.bazel
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
INSTALLATION.md		INSTALLATION.md
LEGAL.md		LEGAL.md
LICENSE		LICENSE
README.md		README.md
REPO_LAYOUT.md		REPO_LAYOUT.md
SECURITY.md		SECURITY.md
WORKSPACE		WORKSPACE
build_wheel_entrypoint.sh		build_wheel_entrypoint.sh
pyproject.toml		pyproject.toml
renovate.json		renovate.json
requirements-dev.txt		requirements-dev.txt
requirements.txt		requirements.txt
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.circleci		.circleci
.github		.github
.vscode		.vscode
bazel		bazel
benchmark		benchmark
docs		docs
examples		examples
libspu		libspu
sml		sml
spu		spu
.bazelrc		.bazelrc
.bazelversion		.bazelversion
.clang-format		.clang-format
.clang-tidy		.clang-tidy
.gitattributes		.gitattributes
.gitignore		.gitignore
.markdownlint.yaml		.markdownlint.yaml
BUILD.bazel		BUILD.bazel
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
INSTALLATION.md		INSTALLATION.md
LEGAL.md		LEGAL.md
LICENSE		LICENSE
README.md		README.md
REPO_LAYOUT.md		REPO_LAYOUT.md
SECURITY.md		SECURITY.md
WORKSPACE		WORKSPACE
build_wheel_entrypoint.sh		build_wheel_entrypoint.sh
pyproject.toml		pyproject.toml
renovate.json		renovate.json
requirements-dev.txt		requirements-dev.txt
requirements.txt		requirements.txt
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.circleci		.circleci
.github		.github
.vscode		.vscode
bazel		bazel
benchmark		benchmark
docs		docs
examples		examples
libspu		libspu
sml		sml
spu		spu
.bazelrc		.bazelrc
.bazelversion		.bazelversion
.clang-format		.clang-format
.clang-tidy		.clang-tidy
.gitattributes		.gitattributes
.gitignore		.gitignore
.markdownlint.yaml		.markdownlint.yaml
BUILD.bazel		BUILD.bazel
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
INSTALLATION.md		INSTALLATION.md
LEGAL.md		LEGAL.md
LICENSE		LICENSE
README.md		README.md
REPO_LAYOUT.md		REPO_LAYOUT.md
SECURITY.md		SECURITY.md
WORKSPACE		WORKSPACE
build_wheel_entrypoint.sh		build_wheel_entrypoint.sh
pyproject.toml		pyproject.toml
renovate.json		renovate.json
requirements-dev.txt		requirements-dev.txt
requirements.txt		requirements.txt
setup.cfg		setup.cfg
setup.py		setup.py

Name		Name	Last commit message	Last commit date
.circleci		.circleci
.github		.github
.vscode		.vscode
bazel		bazel
benchmark		benchmark
docs		docs
examples		examples
libspu		libspu
sml		sml
spu		spu
.bazelrc		.bazelrc
.bazelversion		.bazelversion
.clang-format		.clang-format
.clang-tidy		.clang-tidy
.gitattributes		.gitattributes
.gitignore		.gitignore
.markdownlint.yaml		.markdownlint.yaml
BUILD.bazel		BUILD.bazel
CHANGELOG.md		CHANGELOG.md
CONTRIBUTING.md		CONTRIBUTING.md
INSTALLATION.md		INSTALLATION.md
LEGAL.md		LEGAL.md
LICENSE		LICENSE
README.md		README.md
REPO_LAYOUT.md		REPO_LAYOUT.md
SECURITY.md		SECURITY.md
WORKSPACE		WORKSPACE
build_wheel_entrypoint.sh		build_wheel_entrypoint.sh
pyproject.toml		pyproject.toml
renovate.json		renovate.json
requirements-dev.txt		requirements-dev.txt
requirements.txt		requirements.txt
setup.cfg		setup.cfg
setup.py		setup.py

Latest commit

History

Folders and files

Repository files navigation

SPU: Secure Processing Unit

Contribution Guidelines

Installation Guidelines

Supported platforms

Instructions

Hardware Requirements

Citing SPU

Acknowledgement

About

Resources

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

SPU: Secure Processing Unit

Contribution Guidelines

Installation Guidelines

Supported platforms

Instructions

Hardware Requirements

Citing SPU

Acknowledgement

About

Resources

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

SPU: Secure Processing Unit

Contribution Guidelines

Installation Guidelines

Supported platforms

Instructions

Hardware Requirements

Citing SPU

Acknowledgement

About

Resources

Contributing

Security policy

Stars

Watchers

Forks

Releases

Packages

Contributors

Languages

Latest commit

History

Folders and files

Repository files navigation

SPU: Secure Processing Unit

Contribution Guidelines

Installation Guidelines

Supported platforms

Instructions

Hardware Requirements

Citing SPU