CRAINov 28, 2025

One-Shot Secure Aggregation: A Hybrid Cryptographic Protocol for Private Federated Learning in IoT

arXiv:2511.23252v11 citations
Originality Incremental advance
AI Analysis

This work addresses the scalability and efficiency challenges for IoT devices in federated learning, offering a practical solution for real-world deployments, though it appears incremental as it builds on existing cryptographic techniques.

The paper tackles the communication overhead problem in secure aggregation for federated learning in IoT by proposing Hyb-Agg, a hybrid cryptographic protocol that reduces the process to a single non-interactive transmission per round, achieving sub-second execution times and a constant communication expansion factor of approximately 12x over plaintext size.

Federated Learning (FL) offers a promising approach to collaboratively train machine learning models without centralizing raw data, yet its scalability is often throttled by excessive communication overhead. This challenge is magnified in Internet of Things (IoT) environments, where devices face stringent bandwidth, latency, and energy constraints. Conventional secure aggregation protocols, while essential for protecting model updates, frequently require multiple interaction rounds, large payload sizes, and per-client costs rendering them impractical for many edge deployments. In this work, we present Hyb-Agg, a lightweight and communication-efficient secure aggregation protocol that integrates Multi-Key CKKS (MK-CKKS) homomorphic encryption with Elliptic Curve Diffie-Hellman (ECDH)-based additive masking. Hyb-Agg reduces the secure aggregation process to a single, non-interactive client-to-server transmission per round, ensuring that per-client communication remains constant regardless of the number of participants. This design eliminates partial decryption exchanges, preserves strong privacy under the RLWE, CDH, and random oracle assumptions, and maintains robustness against collusion by the server and up to $N-2$ clients. We implement and evaluate Hyb-Agg on both high-performance and resource-constrained devices, including a Raspberry Pi 4, demonstrating that it delivers sub-second execution times while achieving a constant communication expansion factor of approximately 12x over plaintext size. By directly addressing the communication bottleneck, Hyb-Agg enables scalable, privacy-preserving federated learning that is practical for real-world IoT deployments.

Foundations

The foundational work for this paper's niche, ranked by how specifically the neighbourhood builds on it — not by global fame.

Your Notes