B-6.1 Encryption

⟨Summary B-6.1⟩ GGSW Encryption

𝖦𝖦𝖲𝖶S,σβ,l(M) ={{𝖦𝖫𝖾𝗏S,σβ,l(−Si ⋅M)}i=0k−1,𝖦𝖫𝖾𝗏S,σβ,l(M)} ∈R⟨n,q⟩(k+1)⋅l⋅(k+1)

PIC

Figure 10: An illustration of a GGSW ciphertext