PANDA: Scalable ZKPs for Private Neural Network Guarantees

chaumian · x · 2026-08-19

The paper 'Certified but Private' presents PANDA, a system using Zero-Knowledge Proofs to verify neural network robustness and fairness without exposing private parameters. Built on the CROWN framework, PANDA introduces a novel algorithm for proving linear relaxation bounds. It generates proofs for networks with over 2.9M parameters in 5 minutes and verifies them in 10 seconds, scaling polynomially and supporting networks 4 orders of magnitude larger than previous approaches.

Original post →

More from Safety

Safety channel →