D-1.4 Homomorphic Ciphertext-to-Plaintext Multiplication

TFHE’s ciphertext-to-plaintext multiplication uses LWE’s ciphertext-to-plaintext multiplication scheme, which is equivalent to GLWE’s ciphertext-to-plaintext multiplication scheme (§C-3) with n = 1.

⟨Summary D-1.4⟩ TFHE Ciphertext-to-Plaintext Multiplication

𝖫𝖶𝖤s→,σ(Δm + e) ⋅λ

= (a→, b) ⋅λ

= (λ ⋅a→, λ ⋅b)

= 𝖫𝖶𝖤s→,σ(Δ(m ⋅λ) + λ ⋅e)