3 ms·
it's incredibly algorithm-dependent. if you look into the thesis that originates the 'bootstrapping' technique to transform SHE algorithms into FHE, they determ
by ruined 2y ago
it's incredibly algorithm-dependent. if you look into the thesis that originates the 'bootstrapping' technique to transform SHE algorithms into FHE, they determine the noise limit of their specific algorithm in section 7.3 and then investigate expanding the noise limit in 8 and 10.
(written in 2009) http://crypto.stanford.edu/craig/craig-thesis.pdf http://crypto.stanford.edu/craig/craig-thesis.pdf
some newer FHE don't encounter a noise limit or don't use the bootstrapping technique.
- Ar-Curunir 2y agoAll known FHE schemes use bootstrapping
- ruined 2y agoi expected that, but a search turned up several things claiming to implement fhe without bootstrapping. i didn't investigate and i can't say i'm familiar so maybe they're bogus
- Ar-Curunir 2y agoCorrection: all known even-remotely-practical schemes rely on bootstrapping. See https://crypto.stackexchange.com/questions/103341/fully-homomorphic-encryption-without-bootstrapping https://crypto.stackexchange.com/questions/103341/fully-homo...
- slow_typist 2y agoAs always, there is no free lunch.
- j2kun 2y agoI did see an arxiv paper a while back that claimed to use category theory to do this, but my best bet was it was not secure.