Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

Lecture notes in computer science

Chosen-Ciphertext Secure Fully Homomorphic Encryption

Ran Canetti, Srinivasan Raghuraman, Silas Richelson, Vinod Vaikuntanathan

Published Jan 1, 2017• 76 citations
Publisher
DOI
10.1007/978-3-662-54388-7_8

Related papers

Fully Homomorphic Encryption with Chosen-Ciphertext Security from LWE

Rupeng Yang, Zuoxia Yu, Willy Susilo

Lecture notes in computer science•Jan 1, 2025•5 citations

Multi-key Fully Homomorphic Encryption Scheme with Compact Ciphertext.

Tanping Zhou, Zhenfeng Zhang, Long Chen +3 more

•Jan 1, 2021•7 citations

A secure quantum homomorphic encryption ciphertext retrieval scheme

Zhenwen Cheng, Xiu‐Bo Chen, Gang Xu +4 more

Soft Computing•Feb 1, 2025•3 citations

Multikey Fully Homomorphic Encryption: Removing Noise Flooding in Distributed Decryption via the Smudging Lemma on Discrete Gaussian Distribution

Xiaokang Dai, Wenyuan Wu, Yong Feng

The current multikey fully homomorphic encryption (MKFHE) needs to add exponential noise in the distributed decryption phase to ensure the simulatability of partial decryption. Such a large noise causes the ciphertext modulus of the scheme to increase exponentially compared to the single‐key fully homomorphic encryption (FHE), further reducing the efficiency of the scheme and making the hardness problem on the lattice on which the scheme relies have a subexponential approximation factor (which means that the security of the scheme is reduced). To address this problem, this paper analyzes in detail the noise in partial decryption of the MKFHE based on the learning with error (LWE) problem. It points out that this part of the noise is composed of private key and the noise in initial ciphertext. Therefore, as long as the encryption scheme is leak‐resistant and the noise in partial decryption is independent of the noise in the initial ciphertext, the semantic security of the ciphertext can be guaranteed. In order to make the noise in the initial ciphertext independent of the noise in the partial decryption, this paper proves the smudging lemma on discrete Gaussian distribution and achieves this goal by multiplying the initial ciphertext by a “dummy” ciphertext with a plaintext of 1. Based on the above method, this paper removes the exponential noise in the distributed decryption phase for the first time and reduces the ciphertext modulus of MKFHE from 2 ω ( λ L log λ ) to 2 O ( λ + L ) as the same level as the FHE.

IET Information Security•Jan 1, 2025•1 citation

Chosen-Ciphertext Security from Identity-Based Encryption

Ran Canetti, Shai Halevi, Jonathan I. Katz

Lecture notes in computer science•Jan 1, 2004•912 citations

Chosen-Ciphertext Security from Identity-Based Encryption.

Ran Canetti, Shai Halevi, Jonathan I. Katz

•Jan 1, 2003•0 citations
The current multikey fully homomorphic encryption (MKFHE) needs to add exponential noise in the distributed decryption phase to ensure the simulatability of partial decryption. Such a large noise causes the ciphertext modulus of the scheme to increase exponentially compared to the single‐key fully homomorphic encryption (FHE), further reducing the efficiency of the scheme and making the hardness problem on the lattice on which the scheme relies have a subexponential approximation factor (which means that the security of the scheme is reduced). To address this problem, this paper analyzes in detail the noise in partial decryption of the MKFHE based on the learning with error (LWE) problem. It points out that this part of the noise is composed of private key and the noise in initial ciphertext. Therefore, as long as the encryption scheme is leak‐resistant and the noise in partial decryption is independent of the noise in the initial ciphertext, the semantic security of the ciphertext can be guaranteed. In order to make the noise in the initial ciphertext independent of the noise in the partial decryption, this paper proves the smudging lemma on discrete Gaussian distribution and achieves this goal by multiplying the initial ciphertext by a “dummy” ciphertext with a plaintext of 1. Based on the above method, this paper removes the exponential noise in the distributed decryption phase for the first time and reduces the ciphertext modulus of MKFHE from 2 ω ( λ L log λ ) to 2 O ( λ + L ) as the same level as the FHE.