[prev][parent]
In the RLWE cryptosystem, the formula in ⟨Summary B-1.2⟩ is the same, but S,A⟨i⟩,M⟨i⟩,E⟨i⟩ are polynomials.