Mariana Raykova
Also known as Mariana Petrova Raykova
Mariana Raykova is a cryptographer whose work applies privacy protections to machine learning and language models. Before Google, she earned a computer-science PhD at Columbia, completed a postdoctoral year in IBM Research Watson's Cryptography Group, worked as a research scientist at SRI International and served as an assistant professor at Yale. She coauthored a 2024 watermarking scheme for open-source language models. Her 2025 work includes secure aggregation for federated learning, defenses for local differential privacy and a Google patent for cryptographic multi-party reach and frequency computation. She is a research scientist at Google and coauthored Hadal in 2026, a framework for encrypted computation and model training with label differential privacy.
Timeline
-
By 2013
A Columbia PhD and IBM postdoc
Before joining SRI in 2013, she earns a computer-science PhD at Columbia and spends a year as a postdoc in IBM Research Watson's Cryptography Group.
-
2013–2015
Research scientist at SRI
At SRI International's Computer Science Laboratory, she works as a research scientist from 2013 to 2015.
-
2016–2018
Assistant professor at Yale
She serves as an assistant professor in Yale's Department of Computer Science from 2016 to 2018. In 2017, her group develops cryptographic techniques to let parties share selected private data, and she receives a Google Faculty Research Award for the project.
-
2019
Joining Google Research
She joins Google as a research scientist in 2019. Her research includes secure computation, oblivious data structures, zero knowledge and verifiable computation.
-
2024
Watermarks for open language models
In 2024, she coauthors a watermarking scheme for open-source language models that modifies model parameters and lets detectors identify generated text. The authors evaluate it on OPT-1.3B and OPT-6.7B.
-
2025
Privacy tools for machine learning
At the 2025 SysteMPC workshop, she presents Willow, a secure aggregation framework for single-shot clients, drawing on private analytics for federated learning and exposure notifications. In 2025, she coauthors Vεrity, which presents two methods to prevent poisoning attacks against local differential privacy while preserving its guarantees. A Google patent granted in 2025 lists her as a co-inventor on cryptographic computation for multi-party reach and frequency.
-
2026
Research scientist at Google
She is a research scientist at Google. In 2026, she coauthors Hadal, an encrypted-computation framework, and Hadal-ml, a machine-learning package for model training with label differential privacy. The work integrates with TensorFlow and avoids a trusted third party.
Career
- From 2019GoogleResearch scientist
- 2016–2018Yale UniversityAssistant professor
- 2013–2015SRI InternationalResearch scientist
- IBMPostdoctoral researcher
Education
- Columbia UniversityComputer science PhD
Sources and credits
Photo: We have no published photo of Mariana Raykova yet. Send us a free-licensed photo.
- Mariana Raykova
- Engineering faculty devising solutions to increasing cybersecurity threats | Yale News
- Provably Robust Watermarks for Open-Source Language Models
- SysteMPC Workshop 2025
- V𝜖rity: Verifiable Local Differential Privacy
- US12395317B2 - Cryptographic computation techniques for multi-party reach and frequency - Google Patents
- Hadal: Centralized Label DP Training without a Trusted Party




