Abstract-We present a fully homomorphic encryption scheme that is based solely on the (standard) learning with errors (LWE) assumption. Applying known results on LWE, the security of our scheme is based on the worst-case hardness of "short vector problems" on arbitrary lattices. Our construction improves on previous works in two aspects: 1) We show that "somewhat homomorphic" encryption can be based on LWE, using a new re-linearization technique. In contrast, all previous schemes relied on complexity assumptions related to ideals in various rings. 2) We deviate from the "squashing paradigm" used in all previous works. We introduce a new dimensionmodulus reduction technique, which shortens the ciphertexts and reduces the decryption complexity of our scheme, without introducing additional assumptions. Our scheme has very short ciphertexts and we therefore use it to construct an asymptotically efficient LWE-based single-server private information retrieval (PIR) protocol. The communication complexity of our protocol (in the public-key model) is k · polylog(k) + log |DB| bits per single-bit query (here, k is a security parameter).
In a followup work, REF showed that fully homomorphic encryption can be achieved from the classical LWE assumption, without referring to ideal lattices and without squashing.
Efficient Fully Homomorphic Encryption from (Standard) LWE
2011 IEEE 52nd Annual Symposium on Foundations of Computer Science
2011 IEEE 52nd Annual Symposium on Foundations of Computer Science
Computer Science Mathematics