4 ms·

Fully homomorphic encryption isn't very practical yet, but partial homomorphic schemes such as blind signing have been practical for 10 years.