Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Securely Outsourcing Computations using Homomorphic Encryption

Peter, Andreas

Published Jan 1, 2013• 0 citations
Publisher

Abstract

Web-servers are a dominant medium of modern communication and thus process vast amounts of highly sensitive, private data. Social networks, online auctions, and all kinds of cloud services constitute popular examples of online services complying with this paradigm. Due to many alarming scandals regarding the misuse of private data, IT security solutions protecting this sensitive data (for example by hiding it through encryption) are indispensable. Ideally, web-servers should be able to compute on private data without seeing it - we refer to this as the "Secure Outsourcing of Computation". Most notably, the cryptographic primitive of Homomorphic Encryption (HE) enables the web-servers to process data in the encrypted domain, which thereby hides/protects all private data as it is never available in the clear. More precisely, HE is a type of encryption that allows for the computation of certain functionalities on encrypted data without knowledge of the decryption key. Depending on the HE scheme, various functionalities can be evaluated in the encrypted domain, ranging from additions or multiplications only (Group Homomorphic Encryption, GHE), to virtually any computable functionality (Fully Homomorphic Encryption, FHE). We provide a clean foundational framework for HE that permits security characterizations for a large class of HE schemes and shows strong similarities between GHE and FHE. We study these characterizations in order to assess the limits of HE, and show that GHE is obsolete in the quantum world, meaning that any GHE scheme can be broken by a quantum computer. Together with our newly constructed universal blueprint that encompasses virtually any GHE scheme, we know exactly how these schemes must be designed and what the underlying hardness assumptions must look like. To some extent, this rounds off the topic of GHE both in the standard and quantum model of computation. In the standard model (which is presently assumed to be the most realistic model of computation), GHE is still highly attractive as it provides very efficient solutions to a variety of practical problems. On the basis of our foundational framework, we construct new GHE schemes with unique features and show their employability in practical applications. Most importantly, we use the special features of one of these schemes and develop a novel technique to achieve a practically efficient solution to the problem of securely outsourcing computations. Our construction allows multiple users to send encryptions of their private data under their own keys to a distrusted web-server that can then, on behalf of the users, evaluate any dynamically chosen computable function on these inputs in the encrypted domain (even across encryptions under different public keys) without learning anything at all, and without interacting with the users.

DOI
10.26083/tuprints-00003381

Related papers

Non-interactive protocols for processing encrypted data (Conference Presentation)

Si-Hui Tan

Homomorphic encryption is a cryptographic primitive that enables information processing on encrypted data. Such primitives are useful in a delegated computing setting in which a client delegates processing to a server, but does not trust the server fully with her information. Here, I discuss a way of performing quantum homomorphic encryption. A homomorphic encryption protocol comprises of four algorithms: random key generation, encryption, evaluation, and decryption. Our technique requires that a pair of commuting operators be used to implement the encryption and evaluation. The client randomly selects the former, while the server implements the latter. Then post-evaluation, if the client decrypts using the inverse of the encryption, he retrieves the input state with the desired computation implemented. The code space has to be chosen carefully so that non-trivial evaluations can be performed on the logical qubits. Since the encryption key is not known to the server, the randomness introduced by key generation hides some information about the encoded data despite it being put into the hands of the server. This framework is powerful because it gives a general description for implementing quantum homomorphic encryption. For example, families of commuting groups of operators are known to exist via the Schur-Weyl duality. However, it is limited by a no-go theorem that states that an exponential overhead is needed if arbitrary computation and perfect security are desired. Nonetheless, our protocols are still interesting as an application for near-term quantum computers, especially when the computational tasks require only low-depth circuits.

Quantum Communications and Quantum Imaging•Nov 6, 2018•0 citations

A Comparative Framework for Post-Quantum Cryptography and Homomorphic Encryption: Integration, Methodologies, and Applications

Dr Rajendirakumar S

Abstract The rapid evolution of quantum computing fundamentally threatens modern cryptographic infrastructures, necessitating a paradigm shift toward advanced encryption techniques. While post-quantum cryptography (PQC) ensures that data remains secure against quantum algorithmic decryption, it does not inherently facilitate the processing of that data in untrusted environments. Homomorphic encryption (HE) addresses this computational privacy requirement, yet traditional HE schemes rely on classical mathematical problems that are easily compromised by quantum systems. This paper presents a comprehensive comparative framework that integrates post-quantum cryptographic principles with homomorphic capabilities to enable quantum-resistant, privacy-preserving computation. By analyzing lattice-based algorithms, code-based cryptography, and hardware acceleration paradigms, this study maps the existing trade-offs between security, computational overhead, and practical deployment feasibility in the impending quantum era. Keywords: PQC, HE. 1.Introduction The rapid evolution of quantum computing technology presents a profound threat to modern cryptographic infrastructures. As quantum algorithms, notably Shor's algorithm, mature, they acquire the capability to solve nondeterministic polynomial time problems in polynomial time, thereby breaking traditional asymmetric encryption standards such as RSA and Elliptic Curve Cryptography (ECC) (Chen, 2024). Consequently, the development of post-quantum cryptography (PQC) has become a global imperative to secure sensitive communications and data against future quantum adversaries (Pranjal & Chaturvedi, 2024). Cryptographers are currently focusing on transitioning secure systems to these newly established PQC standards before large-scale quantum computers become commercially viable. While PQC addresses the secure transmission and storage of data, it does not inherently solve the problem of secure data processing in untrusted cloud environments. Homomorphic encryption (HE) provides a sophisticated mechanism that allows computations to be performed directly on encrypted data without requiring prior decryption (Jain & Cherukuri, 2023). The core problem addressed in this paper is the conceptual and practical integration of PQC with HE shown in Fig1.1 which is essential for ensuring quantum-safe, privacy-preserving computation in distributed architectures. Achieving this synthesis is highly complex due to the massive computational overhead and noise accumulation inherent to both cryptographic domains. However, existing approaches to privacy-preserving computation remain broadly insufficient for the post-quantum era. First, conventional homomorphic encryption schemes rely heavily on mathematical hardness assumptions, such as integer factorization or discrete logarithms, which are demonstrably vulnerable to quantum attacks (Chen, 2024). Second, while some high-performance fully homomorphic implementations exist, they suffer from prohibitive computational overhead and severe ciphertext expansion, making widespread deployment impractical without specialized mitigation strategies (Tseng et al., 2025). Third, hardware-accelerated privacy solutions often rely on trusted execution environments, like Intel SGX, which inherently introduce side-channel vulnerabilities and force reliance on centralized hardware trust rather than pure mathematical security (Sadat et al., 2017). To overcome these critical limitations, this paper proposes a structured comparative methodology for evaluating quantum-resistant homomorphic encryption systems. Specifically, our paper makes the following main contributions: We provide a comprehensive comparative framework that categorizes and evaluates lattice-based and code-based homomorphic encryption schemes against classical performance constraints. We propose a structured, hypothetical evaluation pipeline designed to benchmark the computational overhead and latency of post-quantum homomorphic algorithms in federated networking environments. 2.Privacy-preserving computation The literature surrounding privacy-preserving computation can be broadly classified into three primary categories, the first being classical and fully homomorphic encryption (FHE) systems. The core idea behind these schemes is the preservation of algebraic structures during encryption, allowing operations on ciphertexts to reflect directly on the underlying plaintexts without exposing the raw data (Jain & Cherukuri, 2023). A major strength of these classical FHE systems, such as those utilized in encrypted relational databases like FHE-SQL, is their ability to provide end-to-end cryptographic protection for queries without relying on trusted hardware modules (Tseng et al., 2025). However, a fundamental weakness is that early FHE models, and their underlying privacy homomorphisms, remain fundamentally susceptible to quantum cryptanalysis due to their reliance on classical mathematical problems (Sen, 2013). Compared to these classical paradigms, our work specifically focuses on migrating these operational homomorphic properties into genuinely quantum-safe mathematical frameworks. The second category of related work focuses on hardware acceleration and hybrid computational environments for homomorphic encryption. The core idea here involves leveraging specialized hardware, such as ASIC AI chips or coarse-grained compute architectures like Google's TPUs, to mitigate the enormous computational overhead associated with HE (Tong et al., 2025). The strength of this approach lies in its ability to bridge the energy-efficiency gap, often utilizing intelligent compiler frameworks to convert high-precision modular arithmetic into dense, low-precision matrix multiplications. Conversely, the weakness of hardware-centric methods is that architectural mismatches frequently lead to severe resource under-utilization, and hybrid solutions utilizing components like Intel SGX introduce hardware trust assumptions that can compromise pure cryptographic integrity (Sadat et al., 2017). Unlike these approaches, our framework prioritizes algorithmic resilience and quantum resistance over purely hardware-driven and enclave-based optimizations. The third category encompasses emerging post-quantum and quantum homomorphic paradigms, which seek to unify quantum resistance with computational privacy. Researchers have proposed lattice-based HE schemes to replace vulnerable legacy systems like Paillier and ElGamal, successfully enabling secure applications such as federated learning (Chen, 2024). Similarly, code-based cryptography utilizing McEliece and non-negative matrix factorization has shown promise in providing faster encryption and decryption times while remaining mathematically secure against quantum computers (Chen, 2024). Furthermore, advanced quantum homomorphic encryption protocols have explored information-theoretic security combined with homomorphic quantum error-correction to ensure future-proof data protection (Ouyang & Rohde, 2022). While these systems represent the state-of-the-art, their primary weakness remains the massive memory and communication overhead introduced during distributed training protocols, which negatively impacts classification performance. Our approach builds upon this category by proposing a standardized methodology to systematically compare these disparate post-quantum homomorphic techniques. 3.Multi-stage Method To systematically evaluate and deploy post-quantum homomorphic encryption, we propose a structured, multi-stage methodological framework. The first step involves cryptographic primitive selection, where system architects must evaluate and choose between lattice-based constructs, such as ML-KEM adaptations, and code-based systems like McEliece, depending on their domain constraints (Chen, 2024). The second step requires the implementation of an algorithmic parameter optimization module, which dynamically adjusts polynomial degrees and error distributions to balance security levels with the operational multiplicative depth required by the application. Finally, the third step comprises the integration of a specialized abstraction layer designed to map complex high-precision cryptographic operations into hardware-friendly matrix operations, thereby reducing the inherent bottleneck of ciphertext evaluation. The key design choices within this framework are driven by the absolute necessity to balance quantum resistance with practical algorithmic utility. We prioritize lattice-based cryptography for our primary evaluation pathway because of its established resilience against quantum threats and its recent standardization by the National Institute of Standards and Technology (NIST) (Chen, 2024). Additionally, we explicitly design our framework to avoid reliance on trusted hardware environments, opting instead for pure cryptographic guarantees to prevent the side-channel data leaks that often plague hardware-enclave solutions. By focusing on algorithmic alignment and basis-aligned mathematical transformations, the framework ensures that homomorphic workloads can be optimized effectively without compromising the underlying post-quantum security proofs. To validate the efficacy of the proposed framework, we outline a comprehensive evaluation plan utilizing a hypothetical, high-dimensional healthcare benchmarking dataset. The experimental setup will simulate a secure genome-wide association study (GWAS) executing within a fully decentralized federated learning environment (Sadat et al., 2017). The primary metrics for this hypothetical evaluation will include key generation latency, ciphertext expansion ratio, and the amortized computational time required for homomorphic multiplication operations across distributed nodes. By systematically varying the cryptographic noise parameters and observing the resulting degradation in analytical performance, we aim to empirically map the trad

•Dec 23, 2025•0 citations

Multiparty Computation with Low Communication, Computation and Interaction via Threshold FHE.

Gilad Asharov, Abhishek Jain, Daniel Wichs

Abstract. Fully homomorphic encryption (FHE) enables secure computation over the encrypted data of a single party. We explore how to extend this to multiple parties, using threshold fully homomorphic encryption (TFHE). In such scheme, the parties jointly generate a common FHE public key along with a secret key that is shared among them; they can later cooperatively decrypt ciphertexts without learning anything but the plaintext. We show how to instantiate this approach efficiently, by extending the recent FHE schemes of Brakerski, Gentry and Vaikuntanathan (CRYPTO ’11, FOCS ’11, ITCS ’12) based on the (ring) learning with errors assumption. Our main tool is to exploit the property that such schemes are additively homomorphic over their keys. Using TFHE, we construct simple multiparty computation protocols secure against fully malicious attackers, tolerating any number of corruptions, and providing security in the universal composability framework. Our protocols have the following properties: Low interaction: 3 rounds of interaction given a common random string, or 2 rounds with a public-key infrastructure. Low communication: independent of the function being computed (proportional to just input and output sizes). Cloud-assisted computation: the bulk of the computation can be efficiently outsourced to an external entity (e.g. a cloud service) so that the computation of all other parties is independent of the complexity of the evaluated function. 1

•Jan 1, 2011•8 citations

Securely outsourcing linear algebra computations

Mikhail J. Atallah, Keith B. Frikken

We give improved protocols for the secure and private outsourcing of linear algebra computations, that enable a client to securely outsource expensive algebraic computations (like the multiplication of large matrices) to a remote server, such that the server learns nothing about the customer's private input or the result of the computation, and any attempted corruption of the answer by the server is detected with high probability. The computational work performed at the client is linear in the size of its input and does not require the client to locally carry out any expensive encryptions of such input. The computational burden on the server is proportional to the time complexity of the current practically used algorithms for solving the algebraic problem (e.g., proportional to n3 for multiplying two n x n matrices). The improvements we give are: (i) whereas the previous work required more than one remote server and assumed they do not collude, our solution works with a single server (but readily accommodates many, for improved performance); (ii) whereas the previous work required a server to carry out expensive cryptographic computations (e.g., homomorphic encryptions), our solution does not make use of any such expensive cryptographic primitives; and (iii) whereas in previous work collusion by the servers against the client revealed to them the client's inputs, our scheme is resistant to such collusion. As in previous work, we maintain the property that the scheme enables the client to detect any attempt by the server(s) at corruption of the answer, even when the attempt is collusive and coordinated among the servers.

ACM Asia Conference on Computer and Communications Security (ASIA CCS)•Apr 13, 2010•265 citations

A Comprehensive Survey on Lattice-based Cryptography and Homomorphic Encryption

Wenjie He, Jing Wang, Yuan Gao

With the popularization of cloud computing model, the outsourcing of data storage and computing services has become an indispensable trend, which lead to the related data security and privacy protection issues that have attracted extensive attention in the industry. Fully homomorphic encryption, as an encryption technology that can process ciphertext information without exposing plaintext information, has natural user data security and privacy protection characteristics. Meanwhile, the excellent quantum-resistant performance and homomorphic properties of lattice ciphers have made lattice-based homomorphic encryption schemes a much-attend research hotspot in the field of cryptography in recent years. In this paper we mainly introduce the status of all-pass encryption and several typical references for the research of lattice-based all-homomorphic cryptography.

International Academic Exchange Conference on Science and Technology Innovation (IAECST)•Dec 8, 2023•1 citation

Secure Computation on Additive Shares.

Zhihua Xia, Qi Gu, Wenhao Zhou +2 more

The rapid development of cloud computing has probably benefited each of us. However, the privacy risks brought by untrusty cloud servers arise the attention of more and more people and legislatures. In the last two decades, plenty of works seek the way of outsourcing various specific tasks while ensuring the security of private data. Although the addition and multiplication are enough for implementing any functions, the direct utilization of existing schemes like homomorphic encryption will lead to significant efficiency and accuracy loss, which is not suitable for outsourcing computation tasks. The tasks to be outsourced are endless, however, the involved calculations are similar. In this paper, inspired by additive secret sharing and multiplicative secret sharing technologies, we construct a series of novel protocols which support the common secure calculations on numbers (e.g., basic elementary functions) or matrices (e.g., solve eigenvectors) in arbitrary $n$ number of servers ($n \geq 2$), and the $n$-party protocols ensure the security of the original data even if $n-1$ servers collude. All protocols we designed only need constant interaction rounds, and we demonstrate them under universally composability security. We believe that these protocols can provide a new basic tool for actual outsourced tasks.

•Sep 28, 2020•0 citations
Web-servers are a dominant medium of modern communication and thus process vast amounts of highly sensitive, private data. Social networks, online auctions, and all kinds of cloud services constitute popular examples of online services complying with this paradigm. Due to many alarming scandals regarding the misuse of private data, IT security solutions protecting this sensitive data (for example by hiding it through encryption) are indispensable. Ideally, web-servers should be able to compute on private data without seeing it - we refer to this as the "Secure Outsourcing of Computation". Most notably, the cryptographic primitive of Homomorphic Encryption (HE) enables the web-servers to process data in the encrypted domain, which thereby hides/protects all private data as it is never available in the clear. More precisely, HE is a type of encryption that allows for the computation of certain functionalities on encrypted data without knowledge of the decryption key. Depending on the HE scheme, various functionalities can be evaluated in the encrypted domain, ranging from additions or multiplications only (Group Homomorphic Encryption, GHE), to virtually any computable functionality (Fully Homomorphic Encryption, FHE). We provide a clean foundational framework for HE that permits security characterizations for a large class of HE schemes and shows strong similarities between GHE and FHE. We study these characterizations in order to assess the limits of HE, and show that GHE is obsolete in the quantum world, meaning that any GHE scheme can be broken by a quantum computer. Together with our newly constructed universal blueprint that encompasses virtually any GHE scheme, we know exactly how these schemes must be designed and what the underlying hardness assumptions must look like. To some extent, this rounds off the topic of GHE both in the standard and quantum model of computation. In the standard model (which is presently assumed to be the most realistic model of computation), GHE is still highly attractive as it provides very efficient solutions to a variety of practical problems. On the basis of our foundational framework, we construct new GHE schemes with unique features and show their employability in practical applications. Most importantly, we use the special features of one of these schemes and develop a novel technique to achieve a practically efficient solution to the problem of securely outsourcing computations. Our construction allows multiple users to send encryptions of their private data under their own keys to a distrusted web-server that can then, on behalf of the users, evaluate any dynamically chosen computable function on these inputs in the encrypted domain (even across encryptions under different public keys) without learning anything at all, and without interacting with the users.
Homomorphic encryption is a cryptographic primitive that enables information processing on encrypted data. Such primitives are useful in a delegated computing setting in which a client delegates processing to a server, but does not trust the server fully with her information. Here, I discuss a way of performing quantum homomorphic encryption. A homomorphic encryption protocol comprises of four algorithms: random key generation, encryption, evaluation, and decryption. Our technique requires that a pair of commuting operators be used to implement the encryption and evaluation. The client randomly selects the former, while the server implements the latter. Then post-evaluation, if the client decrypts using the inverse of the encryption, he retrieves the input state with the desired computation implemented. The code space has to be chosen carefully so that non-trivial evaluations can be performed on the logical qubits. Since the encryption key is not known to the server, the randomness introduced by key generation hides some information about the encoded data despite it being put into the hands of the server. This framework is powerful because it gives a general description for implementing quantum homomorphic encryption. For example, families of commuting groups of operators are known to exist via the Schur-Weyl duality. However, it is limited by a no-go theorem that states that an exponential overhead is needed if arbitrary computation and perfect security are desired. Nonetheless, our protocols are still interesting as an application for near-term quantum computers, especially when the computational tasks require only low-depth circuits.
Abstract The rapid evolution of quantum computing fundamentally threatens modern cryptographic infrastructures, necessitating a paradigm shift toward advanced encryption techniques. While post-quantum cryptography (PQC) ensures that data remains secure against quantum algorithmic decryption, it does not inherently facilitate the processing of that data in untrusted environments. Homomorphic encryption (HE) addresses this computational privacy requirement, yet traditional HE schemes rely on classical mathematical problems that are easily compromised by quantum systems. This paper presents a comprehensive comparative framework that integrates post-quantum cryptographic principles with homomorphic capabilities to enable quantum-resistant, privacy-preserving computation. By analyzing lattice-based algorithms, code-based cryptography, and hardware acceleration paradigms, this study maps the existing trade-offs between security, computational overhead, and practical deployment feasibility in the impending quantum era. Keywords: PQC, HE. 1.Introduction The rapid evolution of quantum computing technology presents a profound threat to modern cryptographic infrastructures. As quantum algorithms, notably Shor's algorithm, mature, they acquire the capability to solve nondeterministic polynomial time problems in polynomial time, thereby breaking traditional asymmetric encryption standards such as RSA and Elliptic Curve Cryptography (ECC) (Chen, 2024). Consequently, the development of post-quantum cryptography (PQC) has become a global imperative to secure sensitive communications and data against future quantum adversaries (Pranjal & Chaturvedi, 2024). Cryptographers are currently focusing on transitioning secure systems to these newly established PQC standards before large-scale quantum computers become commercially viable. While PQC addresses the secure transmission and storage of data, it does not inherently solve the problem of secure data processing in untrusted cloud environments. Homomorphic encryption (HE) provides a sophisticated mechanism that allows computations to be performed directly on encrypted data without requiring prior decryption (Jain & Cherukuri, 2023). The core problem addressed in this paper is the conceptual and practical integration of PQC with HE shown in Fig1.1 which is essential for ensuring quantum-safe, privacy-preserving computation in distributed architectures. Achieving this synthesis is highly complex due to the massive computational overhead and noise accumulation inherent to both cryptographic domains. However, existing approaches to privacy-preserving computation remain broadly insufficient for the post-quantum era. First, conventional homomorphic encryption schemes rely heavily on mathematical hardness assumptions, such as integer factorization or discrete logarithms, which are demonstrably vulnerable to quantum attacks (Chen, 2024). Second, while some high-performance fully homomorphic implementations exist, they suffer from prohibitive computational overhead and severe ciphertext expansion, making widespread deployment impractical without specialized mitigation strategies (Tseng et al., 2025). Third, hardware-accelerated privacy solutions often rely on trusted execution environments, like Intel SGX, which inherently introduce side-channel vulnerabilities and force reliance on centralized hardware trust rather than pure mathematical security (Sadat et al., 2017). To overcome these critical limitations, this paper proposes a structured comparative methodology for evaluating quantum-resistant homomorphic encryption systems. Specifically, our paper makes the following main contributions: We provide a comprehensive comparative framework that categorizes and evaluates lattice-based and code-based homomorphic encryption schemes against classical performance constraints. We propose a structured, hypothetical evaluation pipeline designed to benchmark the computational overhead and latency of post-quantum homomorphic algorithms in federated networking environments. 2.Privacy-preserving computation The literature surrounding privacy-preserving computation can be broadly classified into three primary categories, the first being classical and fully homomorphic encryption (FHE) systems. The core idea behind these schemes is the preservation of algebraic structures during encryption, allowing operations on ciphertexts to reflect directly on the underlying plaintexts without exposing the raw data (Jain & Cherukuri, 2023). A major strength of these classical FHE systems, such as those utilized in encrypted relational databases like FHE-SQL, is their ability to provide end-to-end cryptographic protection for queries without relying on trusted hardware modules (Tseng et al., 2025). However, a fundamental weakness is that early FHE models, and their underlying privacy homomorphisms, remain fundamentally susceptible to quantum cryptanalysis due to their reliance on classical mathematical problems (Sen, 2013). Compared to these classical paradigms, our work specifically focuses on migrating these operational homomorphic properties into genuinely quantum-safe mathematical frameworks. The second category of related work focuses on hardware acceleration and hybrid computational environments for homomorphic encryption. The core idea here involves leveraging specialized hardware, such as ASIC AI chips or coarse-grained compute architectures like Google's TPUs, to mitigate the enormous computational overhead associated with HE (Tong et al., 2025). The strength of this approach lies in its ability to bridge the energy-efficiency gap, often utilizing intelligent compiler frameworks to convert high-precision modular arithmetic into dense, low-precision matrix multiplications. Conversely, the weakness of hardware-centric methods is that architectural mismatches frequently lead to severe resource under-utilization, and hybrid solutions utilizing components like Intel SGX introduce hardware trust assumptions that can compromise pure cryptographic integrity (Sadat et al., 2017). Unlike these approaches, our framework prioritizes algorithmic resilience and quantum resistance over purely hardware-driven and enclave-based optimizations. The third category encompasses emerging post-quantum and quantum homomorphic paradigms, which seek to unify quantum resistance with computational privacy. Researchers have proposed lattice-based HE schemes to replace vulnerable legacy systems like Paillier and ElGamal, successfully enabling secure applications such as federated learning (Chen, 2024). Similarly, code-based cryptography utilizing McEliece and non-negative matrix factorization has shown promise in providing faster encryption and decryption times while remaining mathematically secure against quantum computers (Chen, 2024). Furthermore, advanced quantum homomorphic encryption protocols have explored information-theoretic security combined with homomorphic quantum error-correction to ensure future-proof data protection (Ouyang & Rohde, 2022). While these systems represent the state-of-the-art, their primary weakness remains the massive memory and communication overhead introduced during distributed training protocols, which negatively impacts classification performance. Our approach builds upon this category by proposing a standardized methodology to systematically compare these disparate post-quantum homomorphic techniques. 3.Multi-stage Method To systematically evaluate and deploy post-quantum homomorphic encryption, we propose a structured, multi-stage methodological framework. The first step involves cryptographic primitive selection, where system architects must evaluate and choose between lattice-based constructs, such as ML-KEM adaptations, and code-based systems like McEliece, depending on their domain constraints (Chen, 2024). The second step requires the implementation of an algorithmic parameter optimization module, which dynamically adjusts polynomial degrees and error distributions to balance security levels with the operational multiplicative depth required by the application. Finally, the third step comprises the integration of a specialized abstraction layer designed to map complex high-precision cryptographic operations into hardware-friendly matrix operations, thereby reducing the inherent bottleneck of ciphertext evaluation. The key design choices within this framework are driven by the absolute necessity to balance quantum resistance with practical algorithmic utility. We prioritize lattice-based cryptography for our primary evaluation pathway because of its established resilience against quantum threats and its recent standardization by the National Institute of Standards and Technology (NIST) (Chen, 2024). Additionally, we explicitly design our framework to avoid reliance on trusted hardware environments, opting instead for pure cryptographic guarantees to prevent the side-channel data leaks that often plague hardware-enclave solutions. By focusing on algorithmic alignment and basis-aligned mathematical transformations, the framework ensures that homomorphic workloads can be optimized effectively without compromising the underlying post-quantum security proofs. To validate the efficacy of the proposed framework, we outline a comprehensive evaluation plan utilizing a hypothetical, high-dimensional healthcare benchmarking dataset. The experimental setup will simulate a secure genome-wide association study (GWAS) executing within a fully decentralized federated learning environment (Sadat et al., 2017). The primary metrics for this hypothetical evaluation will include key generation latency, ciphertext expansion ratio, and the amortized computational time required for homomorphic multiplication operations across distributed nodes. By systematically varying the cryptographic noise parameters and observing the resulting degradation in analytical performance, we aim to empirically map the trad
Abstract. Fully homomorphic encryption (FHE) enables secure computation over the encrypted data of a single party. We explore how to extend this to multiple parties, using threshold fully homomorphic encryption (TFHE). In such scheme, the parties jointly generate a common FHE public key along with a secret key that is shared among them; they can later cooperatively decrypt ciphertexts without learning anything but the plaintext. We show how to instantiate this approach efficiently, by extending the recent FHE schemes of Brakerski, Gentry and Vaikuntanathan (CRYPTO ’11, FOCS ’11, ITCS ’12) based on the (ring) learning with errors assumption. Our main tool is to exploit the property that such schemes are additively homomorphic over their keys. Using TFHE, we construct simple multiparty computation protocols secure against fully malicious attackers, tolerating any number of corruptions, and providing security in the universal composability framework. Our protocols have the following properties: Low interaction: 3 rounds of interaction given a common random string, or 2 rounds with a public-key infrastructure. Low communication: independent of the function being computed (proportional to just input and output sizes). Cloud-assisted computation: the bulk of the computation can be efficiently outsourced to an external entity (e.g. a cloud service) so that the computation of all other parties is independent of the complexity of the evaluated function. 1
We give improved protocols for the secure and private outsourcing of linear algebra computations, that enable a client to securely outsource expensive algebraic computations (like the multiplication of large matrices) to a remote server, such that the server learns nothing about the customer's private input or the result of the computation, and any attempted corruption of the answer by the server is detected with high probability. The computational work performed at the client is linear in the size of its input and does not require the client to locally carry out any expensive encryptions of such input. The computational burden on the server is proportional to the time complexity of the current practically used algorithms for solving the algebraic problem (e.g., proportional to n3 for multiplying two n x n matrices). The improvements we give are: (i) whereas the previous work required more than one remote server and assumed they do not collude, our solution works with a single server (but readily accommodates many, for improved performance); (ii) whereas the previous work required a server to carry out expensive cryptographic computations (e.g., homomorphic encryptions), our solution does not make use of any such expensive cryptographic primitives; and (iii) whereas in previous work collusion by the servers against the client revealed to them the client's inputs, our scheme is resistant to such collusion. As in previous work, we maintain the property that the scheme enables the client to detect any attempt by the server(s) at corruption of the answer, even when the attempt is collusive and coordinated among the servers.
With the popularization of cloud computing model, the outsourcing of data storage and computing services has become an indispensable trend, which lead to the related data security and privacy protection issues that have attracted extensive attention in the industry. Fully homomorphic encryption, as an encryption technology that can process ciphertext information without exposing plaintext information, has natural user data security and privacy protection characteristics. Meanwhile, the excellent quantum-resistant performance and homomorphic properties of lattice ciphers have made lattice-based homomorphic encryption schemes a much-attend research hotspot in the field of cryptography in recent years. In this paper we mainly introduce the status of all-pass encryption and several typical references for the research of lattice-based all-homomorphic cryptography.
The rapid development of cloud computing has probably benefited each of us. However, the privacy risks brought by untrusty cloud servers arise the attention of more and more people and legislatures. In the last two decades, plenty of works seek the way of outsourcing various specific tasks while ensuring the security of private data. Although the addition and multiplication are enough for implementing any functions, the direct utilization of existing schemes like homomorphic encryption will lead to significant efficiency and accuracy loss, which is not suitable for outsourcing computation tasks. The tasks to be outsourced are endless, however, the involved calculations are similar. In this paper, inspired by additive secret sharing and multiplicative secret sharing technologies, we construct a series of novel protocols which support the common secure calculations on numbers (e.g., basic elementary functions) or matrices (e.g., solve eigenvectors) in arbitrary nnn number of servers (n≥2n \geq 2n≥2), and the nnn-party protocols ensure the security of the original data even if n−1n-1n−1 servers collude. All protocols we designed only need constant interaction rounds, and we demonstrate them under universally composability security. We believe that these protocols can provide a new basic tool for actual outsourced tasks.