D-1.3 Homomorphic Ciphertext-to-Plaintext Addition

TFHE’s ciphertext-to-plaintext addition (where λ is a constant to add) uses LWE’s ciphertext-to-plaintext addition scheme, which is equivalent to GLWE’s ciphertext-to-plaintext addition scheme (§C-2) with n = 1.

Summary D-1.3 TFHE Ciphertext-to-Plaintext Addition

𝖫𝖶𝖤s,σ(Δm) + Δλ

= (a, B) + Δλ

= (a, B + Δλ)

= 𝖫𝖶𝖤s,σ(Δ(m + λ))