D-1.4 Homomorphic Ciphertext-to-Plaintext Multiplication

TFHE’s ciphertext-to-plaintext multiplication uses LWE’s ciphertext-to-plaintext multiplication scheme, which is equivalent to GLWE’s ciphertext-to-plaintext multiplication scheme (§C-3) with n = 1.

Summary D-1.4 TFHE Ciphertext-to-Plaintext Multiplication

𝖫𝖶𝖤s,σ(Δm) λ

= (a, b) λ

= (λ a, λ b)

= 𝖫𝖶𝖤s,σ(Δ(m λ))