Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

arXiv:2406.14372 · IEEE Transactions on Control of Network Systems

Ring-LWE-Based Encrypted Controller With Unlimited Number of Recursive Multiplications and Effect of Error Growth

Yeongjun Jang, Joowon Lee, Seonhong Min, Hyesun Kwak, Junsoo Kim, Yongsoo Song

Published Jun 26, 2025• 5 citations
arXivHTMLPDF

Abstract

In this paper, we propose an encrypted dynamic controller that executes an unlimited number of recursive homomorphic multiplications on a Ring Learning With Errors (Ring-LWE) based cryptosystem without bootstrapping. The proposed controller exhibits lower computational complexity compared to existing encrypted controllers implemented on LWE based schemes due to the polynomial structure of Ring-LWE. However, the structural difference introduces additional difficulties in analyzing the effect of error growth; Ring-LWE based schemes inject multiple error coefficients when encrypting a single message, which accumulate under recursive homomorphic multiplications. We show that their effect on the control performance can be arbitrarily bounded by the closed-loop stability, thus recovering the performance of the unencrypted controller. Furthermore, a novel method to “pack” a vector into a polynomial is presented, which enhances computational and memory efficiency when applied to the proposed encrypted controller. The effectiveness of the proposed design is demonstrated through numerical simulations.

DOI
10.1109/tcns.2025.3583610

Related papers

Design Procedure for Dynamic Controllers based on LWE-based Homomorphic Encryption to Operate for Infinite Time Horizon

Junsoo Kim, Hyungbo Shim, Kyoohyung Han

The design of encrypted controllers, which perform control operation directly over encrypted signals via homomorphic cryptosystems, should consider both security of the control data and performance of the controller. Considering the use of Learning With Errors (LWE) based cryptosystem, in this paper, we present a design procedure for encrypted linear dynamic controllers. Providing a guideline for choosing the parameters of the cryptosystem as well as quantization, the procedure guarantees both the desired level of security and performance. Receiving the encrypted signals of the plant input as well as the output, the proposed controller is able to perform the dynamic operation over encrypted data for infinite time horizon, without the use of decryption or reset of the state. Thanks to additively and multiplicatively homomorphic property of the LWE-based cryptosystem, information of both control signals and gain matrices is protected by encryption.

IEEE Conference on Decision and Control (CDC)•Dec 14, 2020•10 citations

Efficient Fully homomorphic encryption scheme using Ring-LWE

Dan Xin, Jingzhou Ji, Jing Feng +2 more

Abstract Data can be stored and processed in an encrypted format using fully homomorphic encryption, which makes cloud computing provider can process data well without even knowing data information. However, most existing homomorphic encryption schemes based on ring learning with errors, focus on the special classes of rings, such as power-of-two cyclotomic rings, which significantly limits its application efficiency in cloud computing. Therefore, in this letter, to solve this problem above, an efficient fully homomorphic encryption scheme is proposed based on ring learning with errors in arbitrary cyclotomic rings. Particularly, a “somewhat homomorphic encryption” scheme is firstly proposed based on ring learning with errors. A novel fully homomorphic encryption scheme is further presented using key-switching. With theoretical and experimental verification, the proposed scheme has advantage of high efficiency of encryption and decryption. The security of our scheme strictly reduces to hardness of decision ring learning with errors problem in the random oracle model.

Journal of Physics Conference Series•Jan 1, 2021•4 citations

Towards an efficient LWE‐based fully homomorphic encryption scheme

Uddipana Dowerah, Srinivasan Krishnaswamy

Abstract The security of most early fully homomorphic encryption schemes was based on the hardness of the Learning with Errors (LWE) problem. These schemes were inefficient in terms of per gate computations and public‐key size. More efficient schemes were later developed based on the hardness of the Ring‐LWE (RLWE) problem. While the hardness of the LWE problem is based on the hardness of the approximate shortest vector problem (GapSVP γ ) over regular lattices, the hardness of the RLWE problem is based on the hardness of the approximate shortest vector problem over ideal lattices. As of now, it has not been proved that the (GapSVP γ ) problem over ideal lattices is as difficult as the corresponding problem over regular lattices. In this work, the authors propose a multi‐bit levelled fully homomorphic encryption scheme using multivariate polynomial evaluations whose security depends on the hardness of the LWE problem. In terms of per gate computation cost, this scheme is more efficient than existing LWE‐based schemes. Further, for an appropriate choice of parameters, the per computation cost for homomorphic multiplication can be made asymptotically comparable to RLWE‐based schemes in a parallel computing environment. For homomorphic multiplication, the scheme uses a polynomial‐based technique that does not require relinearization (and key switching).

IET Information Security•Apr 28, 2022•15 citations

Encrypted Visual Feedback Control Using RLWE-Based Cryptosystem

Taichi IKEZAKI, Kaoru Teranishi

This study proposes an encrypted visual feedback control algorithm for regulating a one-dimensional stage using Ring Learning With Errors (RLWE) encryption. The proposed algorithm performs both feature extraction and controller computations directly on encrypted images, ensuring that sensitive visual data remain protected throughout the entire control process. Furthermore, an image captured by the camera is encrypted into a single ciphertext leveraging the message packing technique of RLWE encryption, thereby reducing computational cost. The effectiveness of the proposed framework is demonstrated through numerical simulations.

arXiv:2604.21410•SICE Annual Conference (SICE)•Sep 1, 2026•0 citations

New Compact Construction of FHE from Cyclic Algebra LWE

Yuan Liu, Licheng Wang, Yongbin Zhou

Fully homomorphic encryption (FHE) scheme allows for performing computations on encrypted data without decrypting it which makes it more popular in various domains. Most previous FHE constructions are limited by the large ciphertext expansion rate and error growth rate. Learning with errors (LWE) problem is a popular primitive for constructing lattice-based FHE. Many algebraic variants of LWE are also developed with further promising cryptographic features. Most previous known LWE variants (over the commutative base rings) are unified into a general framework by Peikert et al. at TCC 2019. In 2022, a new algebraically structured LWE problem over the d-degree cyclic algebra (CLWE) (with modulus q), a typical non-commutative ring, was proposed by Grover et al.. To further explore the utility and potential advantages of this new variant, it is interesting to design new lattice-based FHE schemes by using CLWE. In this paper, by following the diagrams of Gentry-Sahai-Waters (GSW13 for short), we propose a FHE scheme based on the CLWE with an even small ciphertext size. Due to our further expansion of the plaintext space, the average ciphertext expansion rate (CER for short) is smaller. More precisely, compared to original GSW13 and the related GSW-style constructions, the ciphertext size of our proposal is reduced by almost at least 23.69%, and the average CER is reduced about 96% due to our expansion of the plaintext space. Besides, our FHE has an even small error growth rate (EGR for short). After one time multiplication of two ciphertexts, the asymptotical EGR is reduced about 49.8% compared to the original GSW13 and the related GSW-style constructions. Typically, the smaller ciphertext size, CER and EGR make our FHE scheme more efficient in trusted computing environment.

IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)•Dec 17, 2024•0 citations

Dynamic-Key Post-Quantum Encrypted Control Against System Identification Attacks

Park, Jungjin, Kiminao Kogiso

This study proposes post-quantum encrypted control systems based on dynamic-key Learning with Errors (LWE) encryption schemes. The proposed method develops update maps that simultaneously update the private key and ciphertexts within the LWE framework, enabling dynamic-key encrypted control resistant to system identification attacks. The growth of errors induced by homomorphic operations is analyzed, and sufficient parameter conditions guaranteeing correct decryption at each control step are clarified. Furthermore, a design procedure for the encrypted control systems is presented based on security metrics such as sample-identifying complexity and deciphering time. A numerical example demonstrates that the proposed control systems achieve secure control against the considered system identification attack.

arXiv:2604.23564•Apr 26, 2026•0 citations
In this paper, we propose an encrypted dynamic controller that executes an unlimited number of recursive homomorphic multiplications on a Ring Learning With Errors (Ring-LWE) based cryptosystem without bootstrapping. The proposed controller exhibits lower computational complexity compared to existing encrypted controllers implemented on LWE based schemes due to the polynomial structure of Ring-LWE. However, the structural difference introduces additional difficulties in analyzing the effect of error growth; Ring-LWE based schemes inject multiple error coefficients when encrypting a single message, which accumulate under recursive homomorphic multiplications. We show that their effect on the control performance can be arbitrarily bounded by the closed-loop stability, thus recovering the performance of the unencrypted controller. Furthermore, a novel method to “pack” a vector into a polynomial is presented, which enhances computational and memory efficiency when applied to the proposed encrypted controller. The effectiveness of the proposed design is demonstrated through numerical simulations.
The design of encrypted controllers, which perform control operation directly over encrypted signals via homomorphic cryptosystems, should consider both security of the control data and performance of the controller. Considering the use of Learning With Errors (LWE) based cryptosystem, in this paper, we present a design procedure for encrypted linear dynamic controllers. Providing a guideline for choosing the parameters of the cryptosystem as well as quantization, the procedure guarantees both the desired level of security and performance. Receiving the encrypted signals of the plant input as well as the output, the proposed controller is able to perform the dynamic operation over encrypted data for infinite time horizon, without the use of decryption or reset of the state. Thanks to additively and multiplicatively homomorphic property of the LWE-based cryptosystem, information of both control signals and gain matrices is protected by encryption.
Abstract Data can be stored and processed in an encrypted format using fully homomorphic encryption, which makes cloud computing provider can process data well without even knowing data information. However, most existing homomorphic encryption schemes based on ring learning with errors, focus on the special classes of rings, such as power-of-two cyclotomic rings, which significantly limits its application efficiency in cloud computing. Therefore, in this letter, to solve this problem above, an efficient fully homomorphic encryption scheme is proposed based on ring learning with errors in arbitrary cyclotomic rings. Particularly, a “somewhat homomorphic encryption” scheme is firstly proposed based on ring learning with errors. A novel fully homomorphic encryption scheme is further presented using key-switching. With theoretical and experimental verification, the proposed scheme has advantage of high efficiency of encryption and decryption. The security of our scheme strictly reduces to hardness of decision ring learning with errors problem in the random oracle model.
Abstract The security of most early fully homomorphic encryption schemes was based on the hardness of the Learning with Errors (LWE) problem. These schemes were inefficient in terms of per gate computations and public‐key size. More efficient schemes were later developed based on the hardness of the Ring‐LWE (RLWE) problem. While the hardness of the LWE problem is based on the hardness of the approximate shortest vector problem (GapSVP γ ) over regular lattices, the hardness of the RLWE problem is based on the hardness of the approximate shortest vector problem over ideal lattices. As of now, it has not been proved that the (GapSVP γ ) problem over ideal lattices is as difficult as the corresponding problem over regular lattices. In this work, the authors propose a multi‐bit levelled fully homomorphic encryption scheme using multivariate polynomial evaluations whose security depends on the hardness of the LWE problem. In terms of per gate computation cost, this scheme is more efficient than existing LWE‐based schemes. Further, for an appropriate choice of parameters, the per computation cost for homomorphic multiplication can be made asymptotically comparable to RLWE‐based schemes in a parallel computing environment. For homomorphic multiplication, the scheme uses a polynomial‐based technique that does not require relinearization (and key switching).
This study proposes an encrypted visual feedback control algorithm for regulating a one-dimensional stage using Ring Learning With Errors (RLWE) encryption. The proposed algorithm performs both feature extraction and controller computations directly on encrypted images, ensuring that sensitive visual data remain protected throughout the entire control process. Furthermore, an image captured by the camera is encrypted into a single ciphertext leveraging the message packing technique of RLWE encryption, thereby reducing computational cost. The effectiveness of the proposed framework is demonstrated through numerical simulations.
Fully homomorphic encryption (FHE) scheme allows for performing computations on encrypted data without decrypting it which makes it more popular in various domains. Most previous FHE constructions are limited by the large ciphertext expansion rate and error growth rate. Learning with errors (LWE) problem is a popular primitive for constructing lattice-based FHE. Many algebraic variants of LWE are also developed with further promising cryptographic features. Most previous known LWE variants (over the commutative base rings) are unified into a general framework by Peikert et al. at TCC 2019. In 2022, a new algebraically structured LWE problem over the d-degree cyclic algebra (CLWE) (with modulus q), a typical non-commutative ring, was proposed by Grover et al.. To further explore the utility and potential advantages of this new variant, it is interesting to design new lattice-based FHE schemes by using CLWE. In this paper, by following the diagrams of Gentry-Sahai-Waters (GSW13 for short), we propose a FHE scheme based on the CLWE with an even small ciphertext size. Due to our further expansion of the plaintext space, the average ciphertext expansion rate (CER for short) is smaller. More precisely, compared to original GSW13 and the related GSW-style constructions, the ciphertext size of our proposal is reduced by almost at least 23.69%, and the average CER is reduced about 96% due to our expansion of the plaintext space. Besides, our FHE has an even small error growth rate (EGR for short). After one time multiplication of two ciphertexts, the asymptotical EGR is reduced about 49.8% compared to the original GSW13 and the related GSW-style constructions. Typically, the smaller ciphertext size, CER and EGR make our FHE scheme more efficient in trusted computing environment.
This study proposes post-quantum encrypted control systems based on dynamic-key Learning with Errors (LWE) encryption schemes. The proposed method develops update maps that simultaneously update the private key and ciphertexts within the LWE framework, enabling dynamic-key encrypted control resistant to system identification attacks. The growth of errors induced by homomorphic operations is analyzed, and sufficient parameter conditions guaranteeing correct decryption at each control step are clarified. Furthermore, a design procedure for the encrypted control systems is presented based on security metrics such as sample-identifying complexity and deciphering time. A numerical example demonstrates that the proposed control systems achieve secure control against the considered system identification attack.