# R21: NEXUS: Secure Transformer Inference Made Non-interactive

NEXUS combines approximate HE with lightweight garbled circuits for non-interactive two-party transformer forward inference. PLLM status: tracked.

[View canonical HTML](https://pllm.run/research/papers/r21-nexus/)

Document ID: `pllm.docs.research.papers.r21-nexus`  
Release: `0.1.0`

**Status:** `tracked`
**Year:** 2025
**Authors:** Jiawen Zhang, Xinpeng Yang, Lipeng He, Kejia Chen, Wen-jie Lu, Yinghao Wang, Xiaoyang Hou, Jian Liu, Kui Ren, Xiaohu Yang
**External source:** [NEXUS: Secure Transformer Inference Made Non-interactive](https://www.ndss-symposium.org/wp-content/uploads/2025-868-paper.pdf)

## Source contribution

NEXUS combines approximate HE with lightweight garbled circuits for non-interactive two-party transformer forward inference.

## PLLM perspective

Reproduce the exact artifact first, then measure its operator components against the complete PLLM Qwen decoder graph without inferring KV-cache or token-feedback support.

No PLLM NEXUS reproduction has been executed.

This paper remains tracked. Named modules below are implementation targets, not finished PLLM components; no reproduction, integration, assurance, or matched benchmark is claimed.

The source's boundary remains binding: Two-party semi-honest security and one inference evaluator do not establish complete private autoregressive LLM serving.

## PLLM modules and documentation

Target module identifiers: `protocol.nexus`, `gate.nexus_nonlinear`, `kernel.nexus_he`. These identifiers describe scoped work unless this page explicitly links an implementation source. Dependencies: None.

- [Research backlog](/research/backlog/)
- [Reimplementation backlog](/research/backlog/)
- [Clean-room workflow](/research/clean-room/)

## Backlog

This source is assigned to reimplementation priority 8, **Full-system comparison targets**. Its source-registry order is 21. Follow current gates and unfinished work in the [research backlog](/research/backlog/).