tfhe 1.6.1

TFHE-rs is a fully homomorphic encryption (FHE) library that implements Zama's variant of TFHE.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140

use serde::{Deserialize, Serialize};
use tfhe_versionable::Versionize;

use crate::core_crypto::prelude::{
    generate_programmable_bootstrap_glwe_lut, keyswitch_lwe_ciphertext_with_scalar_change,
    CiphertextModulus as CoreCiphertextModulus, LweCiphertext,
};
use crate::shortint::atomic_pattern::AtomicPattern;
use crate::shortint::backward_compatibility::noise_squashing::KS32AtomicPatternNoiseSquashingKeyVersions;
use crate::shortint::ciphertext::SquashedNoiseCiphertext;
use crate::shortint::client_key::atomic_pattern::KS32AtomicPatternClientKey;
use crate::shortint::encoding::compute_delta;
use crate::shortint::engine::ShortintEngine;
use crate::shortint::noise_squashing::{NoiseSquashingPrivateKey, Shortint128BootstrappingKey};
use crate::shortint::server_key::{
    apply_programmable_bootstrap_128, KS32ServerKeyView, ServerKeyView,
};
use crate::shortint::{CarryModulus, Ciphertext, MessageModulus, PaddingBit};

use super::NoiseSquashingAtomicPattern;

#[derive(Clone, Debug, PartialEq, Serialize, Deserialize, Versionize)]
#[versionize(KS32AtomicPatternNoiseSquashingKeyVersions)]
pub struct KS32AtomicPatternNoiseSquashingKey {
    bootstrapping_key: Shortint128BootstrappingKey<u32>,
}

impl KS32AtomicPatternNoiseSquashingKey {
    pub fn new(
        cks: &KS32AtomicPatternClientKey,
        noise_squashing_private_key: &NoiseSquashingPrivateKey,
    ) -> Self {
        let parameters = cks.parameters;

        let bootstrapping_key = Shortint128BootstrappingKey::new(
            &cks.lwe_secret_key,
            parameters.post_keyswitch_ciphertext_modulus(),
            parameters.lwe_noise_distribution(),
            noise_squashing_private_key,
        );

        Self { bootstrapping_key }
    }

    pub fn from_raw_parts(bootstrapping_key: Shortint128BootstrappingKey<u32>) -> Self {
        Self { bootstrapping_key }
    }

    pub fn into_raw_parts(self) -> Shortint128BootstrappingKey<u32> {
        self.bootstrapping_key
    }

    pub fn bootstrapping_key(&self) -> &Shortint128BootstrappingKey<u32> {
        &self.bootstrapping_key
    }
}

impl NoiseSquashingAtomicPattern for KS32AtomicPatternNoiseSquashingKey {
    fn squash_ciphertext_noise(
        &self,
        ciphertext: &Ciphertext,
        src_server_key: ServerKeyView,
        output_message_modulus: MessageModulus,
        output_carry_modulus: CarryModulus,
        output_ciphertext_modulus: CoreCiphertextModulus<u128>,
    ) -> crate::Result<SquashedNoiseCiphertext> {
        let sks_ap = src_server_key.atomic_pattern.kind();
        let src_server_key: KS32ServerKeyView = src_server_key.try_into().map_err(|_| {
            crate::error!(
                "Incompatible atomic pattern between noise squashing key and server key (noise \
squashing ap: KS32, server key ap: {:?})",
                sks_ap
            )
        })?;

        let mut lwe_before_ms = LweCiphertext::new(
            0u32,
            src_server_key
                .atomic_pattern
                .key_switching_key
                .output_lwe_size(),
            src_server_key
                .atomic_pattern
                .key_switching_key
                .ciphertext_modulus(),
        );

        keyswitch_lwe_ciphertext_with_scalar_change(
            &src_server_key.atomic_pattern.key_switching_key,
            &ciphertext.ct,
            &mut lwe_before_ms,
        );

        let output_lwe_size = self.bootstrapping_key.output_lwe_dimension().to_lwe_size();

        let mut res = SquashedNoiseCiphertext::new_zero(
            output_lwe_size,
            output_ciphertext_modulus,
            output_message_modulus,
            output_carry_modulus,
        );

        let bsk_glwe_size = self.bootstrapping_key.glwe_size();
        let bsk_polynomial_size = self.bootstrapping_key.polynomial_size();

        let delta = compute_delta(
            output_ciphertext_modulus,
            output_message_modulus,
            output_carry_modulus,
            PaddingBit::Yes,
        );

        let output_cleartext_space = output_message_modulus.0 * output_carry_modulus.0;

        let id_lut = generate_programmable_bootstrap_glwe_lut(
            bsk_polynomial_size,
            bsk_glwe_size,
            output_cleartext_space.try_into().unwrap(),
            output_ciphertext_modulus,
            delta,
            |x| x,
        );

        ShortintEngine::with_thread_local_mut(|engine| {
            let buffers = engine.get_computation_buffers();

            apply_programmable_bootstrap_128(
                &self.bootstrapping_key,
                &lwe_before_ms,
                res.lwe_ciphertext_mut(),
                &id_lut,
                buffers,
            );
        });

        res.set_degree(ciphertext.degree);

        Ok(res)
    }
}