B-6.1 Encryption

Summary B-6.1 GGSW Encryption

𝖦𝖦𝖲𝖶S,σβ,l(M) ={{𝖦𝖫𝖾𝗏S,σβ,l(Si M)}i=0k1,𝖦𝖫𝖾𝗏S,σβ,l(M)} Rn,q(k+1)l(k+1)

PIC

Figure 10: An illustration of a GGSW ciphertext