We introduce a new algorithm for numerical composition of privacy random variables, useful for computing the accurate differential privacy parameters for composition of mechanisms. Our algorithm achieves a running time and memory usage of for the task of self-composing a mechanism, from a broad class of mechanisms, times; this class, e.g., includes the sub-sampled Gaussian mechanism, that appears in the analysis of differentially private stochastic gradient descent. By comparison, recent work by Gopi et al. (NeurIPS 2021) has obtained a running time of for the same task. Our approach extends to the case of composing different mechanisms in the same class, improving upon their running time and memory usage from to .
View on arXiv