D-1.3 Homomorphic Ciphertext-to-Plaintext Addition

TFHE’s ciphertext-to-plaintext addition (where λ is a constant to add) uses LWE’s ciphertext-to-plaintext addition scheme, which is equivalent to GLWE’s ciphertext-to-plaintext addition scheme (§C-2) with n = 1.

Summary D-1.3 TFHE Ciphertext-to-Plaintext Addition

𝖫𝖶𝖤s,σ(Δm + e) + Δλ

= (a, b) + Δλ

= (a, b + Δλ)

= 𝖫𝖶𝖤s,σ(Δ(m + λ) + e)