## Cryptology ePrint Archive: Report 2021/1335

Integer Functions Suitable for Homomorphic Encryption over Finite Fields

Ilia Iliashenko and Christophe Nègre and Vincent Zucca

Abstract: Fully Homomorphic Encryption (FHE) gives the ability to evaluate any function over encrypted data. However, despite numerous improvements during the last decade, the computational overhead caused by homomorphic computations is still very important. As a consequence, optimizing the way of performing the computations homomorphically remains fundamental. Several popular FHE schemes such as BGV and BFV encode their data, and thus perform their computations, in finite fields. In this work, we study and exploit algebraic relations occurring in prime characteristic allowing to speed-up the homomorphic evaluation of several functions over prime fields.

More specifically we give several examples of unary functions: "modulo", "is power of $b$", "Hamming weight" and "Mod2'" whose homomorphic evaluation complexity over $\mathbb{F}_p$ can be reduced from the generic bound $\sqrt{2p} + \mathcal{O}(\log(p))$ homomorphic multiplications, to $\sqrt{p} + \mathcal{O}(\log(p))$, $\mathcal{O}(\log (p))$, $\mathcal{O}(\sqrt{p/\log (p)})$ and $\mathcal{O}(\sqrt{p/\log (p)})$ respectively. Additionally we provide a proof of a recent claim regarding the structure of the polynomial interpolation of the "less-than" bivariate function which confirms that this function can be evaluated in $2p-6$ homomorphic multiplications instead of $3p-5$ over $\mathbb{F}_p$ for $p\geq 5$.

Category / Keywords: foundations / fully homomorphic encryption, finite fields, polynomial evaluation

Original Publication (with minor differences): WAHC 2021

Date: received 3 Oct 2021, last revised 6 Oct 2021

Contact author: ilia at esat kuleuven be, christophe negre at upvd fr, vincent zucca at upvd fr

Available format(s): PDF | BibTeX Citation

Short URL: ia.cr/2021/1335

[ Cryptology ePrint archive ]