Skip to main content

SecureAggregator

Struct SecureAggregator 

Source
pub struct SecureAggregator { /* private fields */ }
Expand description

Server-side aggregator state for a single round.

The aggregator owns no cryptographic key material – every pairwise mask can be recomputed on demand from round_seed. It keeps track of which clients have successfully submitted, which clients are known to have dropped, and cached pairwise masks used during dropout reconstruction.

Implementations§

Source§

impl SecureAggregator

Source

pub fn new(config: SecureAggregationConfig) -> Result<Self>

Build a new aggregator for one round.

Validates the configuration up front so that downstream operations can assume well-formed values. The dropout safety check requires that the modulus is at least one order of magnitude larger than the nominal quantised value range, which guarantees that the partial masked sum cannot silently wrap.

Source

pub fn receive(&mut self, submission: MaskedGradient) -> Result<()>

Accept a client submission.

Re-submissions from the same client_id overwrite the previous value (later submissions are considered more authoritative). A submission whose vector length does not match the configured dimension is rejected with OptimError::DimensionMismatch.

Source

pub fn mark_dropped(&mut self, client_id: ClientId) -> Result<()>

Mark a client as having dropped out of this round.

Dropped clients are excluded from the aggregated sum but the masks they would have used are still cancelled by the dropout-reconstruction phase of Self::aggregate.

Source

pub fn aggregate(&self) -> Result<Array1<f64>>

Aggregate the received submissions, cancelling any masks belonging to dropped clients.

Returns the dequantised real-valued sum of the received clients’ gradients. Dropped clients contribute nothing to the sum (their gradient is, by definition, never uploaded) but their pairwise masks are still removed so the remaining clients’ uploads telescope correctly.

Source

pub fn reset(&mut self)

Reset the per-round state so the same aggregator can be reused.

Source

pub fn received_count(&self) -> usize

Number of client submissions currently held.

Source

pub fn dropped_count(&self) -> usize

Number of clients currently marked as dropped.

Source

pub fn config(&self) -> &SecureAggregationConfig

Read-only access to the aggregator’s configuration.

Trait Implementations§

Source§

impl Clone for SecureAggregator

Source§

fn clone(&self) -> SecureAggregator

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for SecureAggregator

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<ST, DT> CastableFrom<ST, Initialized, Initialized> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<ST, DT> CastableFrom<ST, Uninit, Uninit> for DT
where ST: ?Sized, DT: ?Sized,

Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> DynClone for T
where T: Clone,

Source§

fn __clone_box(&self, _: Private) -> *mut ()

Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> IntoEither for T

Source§

fn into_either(self, into_left: bool) -> Either<Self, Self>

Converts self into a Left variant of Either<Self, Self> if into_left is true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

fn into_either_with<F>(self, into_left: F) -> Either<Self, Self>
where F: FnOnce(&Self) -> bool,

Converts self into a Left variant of Either<Self, Self> if into_left(&self) returns true. Converts self into a Right variant of Either<Self, Self> otherwise. Read more
Source§

impl<T> Pointable for T

Source§

const ALIGN: usize

The alignment of pointer.
Source§

type Init = T

The type for initializers.
Source§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
Source§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
Source§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
Source§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
Source§

impl<T> Read<Exclusive, BecauseExclusive> for T
where T: ?Sized,

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<SS, SP> SupersetOf<SS> for SP
where SS: SubsetOf<SP>,

Source§

fn to_subset(&self) -> Option<SS>

The inverse inclusion map: attempts to construct self from the equivalent element of its superset. Read more
Source§

fn is_in_subset(&self) -> bool

Checks if self is actually part of its subset T (and can be converted to it).
Source§

fn to_subset_unchecked(&self) -> SS

Use with care! Same as self.to_subset but without any property checks. Always succeeds.
Source§

fn from_subset(element: &SS) -> SP

The inclusion map: converts self to the equivalent element of its superset.
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V