D-1.3 Homomorphic Ciphertext-to-Plaintext Addition

TFHE’s ciphertext-to-plaintext addition (where λ is a constant to add) uses LWE’s ciphertext-to-plaintext addition scheme, which is equivalent to GLWE’s ciphertext-to-plaintext addition scheme (§C-2) with n = 1.

⟨Summary D-1.3⟩ TFHE Ciphertext-to-Plaintext Addition

𝖫𝖶𝖤s→,σ(Δm + e) + Δλ

= (a→, b) + Δλ

= (a→, b + Δλ)

= 𝖫𝖶𝖤s→,σ(Δ(m + λ) + e)