{"about":{"site":"https://codewithpapers.app","non_affiliation":"Code with Papers and Syntology are not affiliated with, endorsed by, or sponsored by Papers with Code, Meta, or the pwc-archive mirror.","licence":"CC BY-SA 4.0","licence_url":"https://creativecommons.org/licenses/by-sa/4.0/legalcode","attribution":"https://codewithpapers.app/attribution","modified":"archive material modified by Syntology; see the attribution page"},"url":"/paper/arxiv-2601-05635","title":"Continual Pretraining on Encrypted Synthetic Data for Privacy-Preserving LLMs","arxiv_id":"2601.05635","date":"2026-01-09","proceeding":null,"authors":["Honghao Liu","Xuhui Jiang","Chengjin Xu","Cehao Yang","Yiran Cheng","Lionel Ni","Jian Guo"],"abstract":"Preserving privacy in sensitive data while pretraining large language models on small, domain-specific corpora presents a significant challenge. In this work, we take an exploratory step toward privacy-preserving continual pretraining by proposing an entity-based framework that synthesizes encrypted training data to protect personally identifiable information (PII). Our approach constructs a weighted entity graph to guide data synthesis and applies deterministic encryption to PII entities, enabling LLMs to encode new knowledge through continual pretraining while granting authorized access to sensitive data through decryption keys. Our results on limited-scale datasets demonstrate that our pretrained models outperform base models and ensure PII security, while exhibiting a modest performance gap compared to models trained on unencrypted synthetic data. We further show that increasing the number of entities and leveraging graph-based synthesis improves model performance, and that encrypted models retain instruction-following capabilities with long retrieved contexts. We discuss the security implications and limitations of deterministic encryption, positioning this work as an initial investigation into the design space of encrypted data pretraining for privacy-preserving LLMs. Our code is available at https://github.com/DataArcTech/SoE.","url_abs":"https://arxiv.org/abs/2601.05635","url_pdf":"https://arxiv.org/pdf/2601.05635","source":{"archive":null,"snapshot":"2025-07-28","note":"not in the Papers with Code archive (frozen at the snapshot)","row_kind":"graph","title_abstract_authors_date":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)"},"code_links":[],"tasks":[],"methods":[],"datasets_introduced":[],"methods_introduced":[],"results":[],"syntology":{"syntology_url":"https://syntology.ai/paper/2601.05635","atlas_url":null,"mcp":{"get_harvested_code_for_paper":{"arxiv_id":"2601.05635"}},"developers":"https://syntology.ai/developers","read_at":"2026-09-25T09:33:49+00:00","read_at_is":"when the build read Syntology's graph, not when any sample ran","claim":"Per-sample execution status on synthesized fixtures; not a correctness claim about the paper. Samples come from repositories linked to the paper, official or community; repo_kind says which.","repos":[{"mentioned_in_github":null,"is_official":null,"provenance":"deterministic:regex_extraction","mentioned_in_paper":null,"url":"https://github.com/DataArcTech/SoE","reach":{"status":"ok","spdx":"Apache-2.0"}}],"summary":{"unverified":10},"by_repo_kind":{"found_in_text":{"samples":10,"ran":0,"repositories":1}},"repo_kind_vocabulary":{"official":"The archive marks this repository official for the paper","named_in_paper":"The archive records that the paper mentions this repository; it is not marked official","listed":"In the archive's code links for this paper, not marked official and not recorded as mentioned in the paper","found_in_text":"Syntology found this repository in the paper's own text; whether it is the authors' implementation is not asserted","community":"Not in the archive's code links for this paper; a community repository Syntology harvested"},"n_pointer_only_for_licence":0,"samples":[{"code_sha256_prefix":"d27c303754bc664a","entry":"chat_question_format","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"demo/crypto_chat_bot.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/demo/crypto_chat_bot.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"d27c303754bc664a"}},{"code_sha256_prefix":"346d6e77d8353cec","entry":"chat_with_llm","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"demo/vector_database.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/demo/vector_database.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"346d6e77d8353cec"}},{"code_sha256_prefix":"1ba274d678b1cfd2","entry":"get_synthesized_data_from_json","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"crypto/utils.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/crypto/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"1ba274d678b1cfd2"}},{"code_sha256_prefix":"fce9fb5f33ab33f7","entry":"get_vote_answer","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"calcu_score.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/calcu_score.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"fce9fb5f33ab33f7"}},{"code_sha256_prefix":"c8a529d572469848","entry":"insert_dash","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"crypto/utils.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/crypto/utils.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"c8a529d572469848"}},{"code_sha256_prefix":"d6d25a00486cb0a3","entry":"jload_list","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"crypto/utils.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/crypto/utils.py","link_basis":"plan_row","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"d6d25a00486cb0a3"}},{"code_sha256_prefix":"16148afc30b7cf0c","entry":"load_synthesized_data","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"crypto/cipher_token.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/crypto/cipher_token.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"16148afc30b7cf0c"}},{"code_sha256_prefix":"8bdd586e1ec8b886","entry":"multiple_choice_question_format","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"demo/crypto_chat_bot.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/demo/crypto_chat_bot.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"8bdd586e1ec8b886"}},{"code_sha256_prefix":"a6d55c66986f1e8d","entry":"replace_base64_with_tokens","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"crypto/crypto_entity.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/crypto/crypto_entity.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"a6d55c66986f1e8d"}},{"code_sha256_prefix":"19089cfe06cc10ac","entry":"short_answer_question_format","repo":"DataArcTech/SoE","repo_kind":"found_in_text","path":"demo/crypto_chat_bot.py","file_url":"https://github.com/DataArcTech/SoE/blob/HEAD/demo/crypto_chat_bot.py","link_basis":"first_harvest_node","language":"python","status":"unverified","verification_level":0,"contract_check":null,"metamorphic_tier":null,"behaviour_fingerprint":false,"licence":"Apache-2.0","inline_ok":true,"mcp_get_code":{"code_sha256":"19089cfe06cc10ac"}}]},"arxiv_metadata":{"licence":"arXiv metadata, CC0 1.0 (https://info.arxiv.org/help/license)","fields":["title","abstract","authors","date"],"primary_category":"cs.CL","source":"arxiv_2026.jsonl"},"syntology_extracted_results":{"kind":"leaderboard_placements","source":"Syntology's leaderboard-shaped extractor over the paper's own arXiv-HTML tables: a model pointed at a cell, the number was read from that cell and checked against the board's metric, dataset, split and scale, and an independent check accepted the entry; not reviewed by the paper's authors or the archive's editors","extractor_model":"global.anthropic.claude-sonnet-4-5-20250929-v1:0","verifier_model":null,"prompt_sha":"fa63d4bb9d755694","coverage":{"sentence":"Syntology has checked 6,885 of the 9,623 papers on this site that are newer than the archive; results from the others appear after they are checked.","papers_newer_than_archive":9623,"papers_checked":6885},"entries":[],"not_placed":{"boards":0,"rejected_by_independent_check":0,"refused_by_a_rule":0,"check_did_not_answer":0,"proposed_without_a_cell":0,"declined_by_site":0}}}