Paper 2021/634

Setting Up Efficient TFHE Parameters for Multivalue Plaintexts and Multiple Additions

Jakub Klemsa


Unlike traditional and/or standardized ciphers, TFHE offers much space for the setup of its parameters. Not only the parameter choice affects the plaintext space size and security, it also greatly impacts the performance of TFHE, in particular, its bootstrapping. In this paper, we provide an exhaustive description of TFHE, including its foundations, (functional) bootstrapping and error propagation during all operations. In addition, we outline a bootstrapping scenario without the key switching step. Based on our thorough summary, we suggest an approach for the setup of TFHE parameters with particular respect to bootstrapping efficiency. Finally, we propose twelve setups of real-world TFHE parameters for six different scenarios with and without key switching, respectively, and we compare their performance. N.b.: This is a technical paper, which is mainly intended for researchers interested in TFHE. However, due to its self-containment, it shall be accessible also for readers with a basic knowledge of TFHE.

Note: updated parameter set C according to intended application

Available format(s)
Publication info
Preprint. MINOR revision.
fully homomorphic encryptionTFHE
Contact author(s)
klemsjak @ fel cvut cz
2021-07-02: last of 2 revisions
2021-05-17: received
See all versions
Short URL
Creative Commons Attribution


      author = {Jakub Klemsa},
      title = {Setting Up Efficient TFHE Parameters for Multivalue Plaintexts and Multiple Additions},
      howpublished = {Cryptology ePrint Archive, Paper 2021/634},
      year = {2021},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.