{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T23:12:30Z","timestamp":1783725150770,"version":"3.55.0"},"reference-count":0,"publisher":"Privacy Enhancing Technologies Symposium Advisory Board","issue":"3","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["PoPETs"],"abstract":"<jats:p>Stochastic Gradient Descent (SGD) is the foundation of modern machine learning (ML). In privacy-sensitive settings, gradients can reveal details about individual data points. Differential Privacy (DP) protects sensitive data during ML training by clipping gradients and adding calibrated Gaussian noise. However, existing frameworks assume semi-honest participants, which fails in adversarial or federated environments where malicious actors can bypass or alter the noise addition process, breaking privacy guarantees. We present VeriDP, a framework for verifiable differentially private training that cryptographically enforces and proves the correct execution of differentially private stochastic gradient descent (DP-SGD) in zero knowledge. VeriDP integrates Zero-Knowledge Proofs (ZKPs) with polynomial commitments, sumcheck and GKR-based proofs, and incrementally verifiable computation (IVC) to generate compact proofs of correct gradient computation, clipping, averaging, and Gaussian noise generation\u2014without revealing private data or randomness. Unlike previous systems that only verify the final privacy budget, VeriDP enables per-iteration verifiability of each model update, providing strong privacy assurances even in adversarial settings. This establishes a novel and complete Zero-Knowledge Proof of Differentially Private Stochastic Gradient Descent (ZK-DPSGD), uniting differential privacy and verifiable computation for secure and auditable ML. Our evaluation shows that prover time increases linearly with the number of input samples, while both verifier time (2\u20135 ms) and proof size (3\u20134 KB) remain compact and effectively constant.<\/jats:p>","DOI":"10.56553\/popets-2026-0070","type":"journal-article","created":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T22:14:47Z","timestamp":1783721687000},"page":"48-64","source":"Crossref","is-referenced-by-count":0,"title":["VeriDP: Verifiable Differentially Private Training"],"prefix":"10.56553","volume":"2026","author":[{"given":"Behzad","family":"Abdolmaleki","sequence":"first","affiliation":[{"name":"University of Sheffield"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Amir R.","family":"Asadi","sequence":"additional","affiliation":[{"name":"University of Cambridge"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vahid R.","family":"Asadi","sequence":"additional","affiliation":[{"name":"University of Waterloo"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stefan","family":"K\u00f6psell","sequence":"additional","affiliation":[{"name":"Barkhausen Institut"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bhavish","family":"Mohee","sequence":"additional","affiliation":[{"name":"University of Sheffield"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nahid","family":"Roustaeifar","sequence":"additional","affiliation":[{"name":"University of Sheffield"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Maryam","family":"Zarezadeh","sequence":"additional","affiliation":[{"name":"Barkhausen Institut"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"35752","published-online":{"date-parts":[[2026,7]]},"container-title":["Proceedings on Privacy Enhancing Technologies"],"original-title":[],"deposited":{"date-parts":[[2026,7,10]],"date-time":"2026-07-10T22:14:49Z","timestamp":1783721689000},"score":1,"resource":{"primary":{"URL":"https:\/\/petsymposium.org\/popets\/2026\/popets-2026-0070.php"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":0,"journal-issue":{"issue":"3","published-online":{"date-parts":[[2026,7]]}},"alternative-id":["10.56553\/popets-2026-0070"],"URL":"https:\/\/doi.org\/10.56553\/popets-2026-0070","relation":{},"ISSN":["2299-0984"],"issn-type":[{"value":"2299-0984","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]}}}