arnaucube/phantom-zone
1
0
Fork 0
mirror of https://github.com/arnaucube/phantom-zone.git synced 2026-01-09 15:41:30 +01:00
Code Issues Projects Releases Wiki Activity

rlwe x rgsw works

Browse Source
This commit is contained in:
Janmajaya Mall
2024-05-01 16:45:17 +05:30
parent 315e4fd767
commit a6510189e8
3 changed files with 41 additions and 61 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/decomposer.rs
View File

@@ -175,7 +175,7 @@ mod tests {
let value_back = decomposer.recompose(&limbs, &modq_op); let value_back = decomposer.recompose(&limbs, &modq_op);
let rounded_value = let rounded_value =
round_value(value, decomposer.ignore_bits) << decomposer.ignore_bits; round_value(value, decomposer.ignore_bits) << decomposer.ignore_bits;
dbg!(rounded_value, value, value_back); // dbg!(rounded_value, value, value_back);
assert_eq!( assert_eq!(
rounded_value, value_back, rounded_value, value_back,
"Expected {rounded_value} got {value_back} for q={q}" "Expected {rounded_value} got {value_back} for q={q}"

54
src/random.rs
View File

@@ -8,7 +8,7 @@ use rand_distr::Distribution;
use crate::utils::WithLocal; use crate::utils::WithLocal;
thread_local! { thread_local! {
pub(crate) static DEFAULT_RNG: RefCell<DefaultSecureRng> = RefCell::new(DefaultSecureRng::new()); pub(crate) static DEFAULT_RNG: RefCell<DefaultSecureRng> = RefCell::new(DefaultSecureRng::new_seeded([0u8;32]));
} }
pub(crate) trait NewWithSeed { pub(crate) trait NewWithSeed {
@@ -102,19 +102,19 @@ impl RandomUniformDist<[u64]> for DefaultSecureRng {
impl RandomGaussianDist<u64> for DefaultSecureRng { impl RandomGaussianDist<u64> for DefaultSecureRng {
type Parameters = u64; type Parameters = u64;
fn random_fill(&mut self, parameters: &Self::Parameters, container: &mut u64) { fn random_fill(&mut self, parameters: &Self::Parameters, container: &mut u64) {
// let o = rand_distr::Normal::new(0.0, 3.2f64) let o = rand_distr::Normal::new(0.0, 3.2f64)
// .unwrap() .unwrap()
// .sample(&mut self.rng) .sample(&mut self.rng)
// .round(); .round();
// // let o = 0.0f64; // let o = 0.0f64;
// let is_neg = o.is_sign_negative() && o != 0.0; let is_neg = o.is_sign_negative() && o != 0.0;
// if is_neg { if is_neg {
// *container = parameters - (o.abs() as u64); *container = parameters - (o.abs() as u64);
// } else { } else {
// *container = o as u64; *container = o as u64;
// } }
} }
} }
@@ -140,21 +140,21 @@ impl RandomGaussianDist<u32> for DefaultSecureRng {
impl RandomGaussianDist<[u64]> for DefaultSecureRng { impl RandomGaussianDist<[u64]> for DefaultSecureRng {
type Parameters = u64; type Parameters = u64;
fn random_fill(&mut self, parameters: &Self::Parameters, container: &mut [u64]) { fn random_fill(&mut self, parameters: &Self::Parameters, container: &mut [u64]) {
// izip!( izip!(
// rand_distr::Normal::new(0.0, 3.2f64) rand_distr::Normal::new(0.0, 3.2f64)
// .unwrap() .unwrap()
// .sample_iter(&mut self.rng), .sample_iter(&mut self.rng),
// container.iter_mut() container.iter_mut()
// ) )
// .for_each(|(oi, v)| { .for_each(|(oi, v)| {
// let oi = oi.round(); let oi = oi.round();
// let is_neg = oi.is_sign_negative() && oi != 0.0; let is_neg = oi.is_sign_negative() && oi != 0.0;
// if is_neg { if is_neg {
// *v = parameters - (oi.abs() as u64); *v = parameters - (oi.abs() as u64);
// } else { } else {
// *v = oi as u64; *v = oi as u64;
// } }
// }); });
} }
} }

46
src/rgsw.rs
View File

@@ -107,14 +107,12 @@ where
.for_each(|(to_ri, from_ri)| { .for_each(|(to_ri, from_ri)| {
to_ri.as_mut().copy_from_slice(from_ri.as_ref()); to_ri.as_mut().copy_from_slice(from_ri.as_ref());
}); });
// println!("RGSW key; coefficient {:?}", &data);
// Send polynomials to evaluation domain // Send polynomials to evaluation domain
let ring_size = data.dimension().1; let ring_size = data.dimension().1;
let nttop = N::new(value.modulus, ring_size); let nttop = N::new(value.modulus, ring_size);
data.iter_rows_mut() data.iter_rows_mut()
.for_each(|ri| nttop.forward(ri.as_mut())); .for_each(|ri| nttop.forward(ri.as_mut()));
// println!("RGSW key; {:?}", &data);
Self { Self {
data: data, data: data,
@@ -676,7 +674,8 @@ pub(crate) fn secret_key_encrypt_rgsw<
seed: R::Seed, seed: R::Seed,
rng: &mut R, rng: &mut R,
) where ) where
<Mmut as Matrix>::R: RowMut + RowEntity + TryConvertFrom<[S], Parameters = Mmut::MatElement>, <Mmut as Matrix>::R:
RowMut + RowEntity + TryConvertFrom<[S], Parameters = Mmut::MatElement> + Debug,
Mmut::MatElement: Copy + Debug, Mmut::MatElement: Copy + Debug,
Mmut: Debug, Mmut: Debug,
{ {
@@ -688,7 +687,7 @@ pub(crate) fn secret_key_encrypt_rgsw<
// RLWE(-sm), RLWE(m) // RLWE(-sm), RLWE(m)
let (rlwe_dash_nsm, b_rlwe_dash_m) = out_rgsw.split_at_row_mut(d * 2); let (rlwe_dash_nsm, b_rlwe_dash_m) = out_rgsw.split_at_row_mut(d * 2);
dbg!(rlwe_dash_nsm.len(), b_rlwe_dash_m.len());
let mut s_eval = Mmut::R::try_convert_from(s, &q); let mut s_eval = Mmut::R::try_convert_from(s, &q);
ntt_op.forward(s_eval.as_mut()); ntt_op.forward(s_eval.as_mut());
@@ -702,7 +701,7 @@ pub(crate) fn secret_key_encrypt_rgsw<
gadget_vector.iter() gadget_vector.iter()
) )
.for_each(|(ai, bi, beta_i)| { .for_each(|(ai, bi, beta_i)| {
// Sample a_i and transform to evaluation domain // Sample a_i
RandomUniformDist::random_fill(rng, &q, ai.as_mut()); RandomUniformDist::random_fill(rng, &q, ai.as_mut());
// a_i * s // a_i * s
@@ -725,26 +724,21 @@ pub(crate) fn secret_key_encrypt_rgsw<
// polynomials of part A of RLWE'(m) are sampled from seed // polynomials of part A of RLWE'(m) are sampled from seed
let mut p_rng = R::new_with_seed(seed); let mut p_rng = R::new_with_seed(seed);
let mut a = Mmut::zeros(d, ring_size); let mut a = Mmut::zeros(d, ring_size);
a.iter_rows_mut().for_each(|ai| { a.iter_rows_mut()
RandomUniformDist::random_fill(&mut p_rng, &q, ai.as_mut()); .for_each(|ai| RandomUniformDist::random_fill(&mut p_rng, &q, ai.as_mut()));
ntt_op.forward(ai.as_mut());
});
a a
}; };
// println!("RGSW sample RLWE'_A(m) {:?}", &a_rlwe_dash_m);
izip!( izip!(
a_rlwe_dash_m.iter_rows_mut(), a_rlwe_dash_m.iter_rows_mut(),
b_rlwe_dash_m.iter_mut(), b_rlwe_dash_m.iter_mut(),
gadget_vector.iter() gadget_vector.iter()
) )
.for_each(|(ai, bi, beta_i)| { .for_each(|(ai, bi, beta_i)| {
dbg!(&beta_i);
// ai * s // ai * s
// ntt_op.forward(ai.as_mut()); ntt_op.forward(ai.as_mut());
mod_op.elwise_mul_mut(ai.as_mut(), s_eval.as_ref()); mod_op.elwise_mul_mut(ai.as_mut(), s_eval.as_ref());
ntt_op.backward(ai.as_mut());
// beta_i * m // beta_i * m
mod_op.elwise_scalar_mul(scratch_space.as_mut(), m.as_ref(), beta_i); mod_op.elwise_scalar_mul(scratch_space.as_mut(), m.as_ref(), beta_i);
@@ -755,15 +749,6 @@ pub(crate) fn secret_key_encrypt_rgsw<
mod_op.elwise_add_mut(bi.as_mut(), scratch_space.as_ref()); mod_op.elwise_add_mut(bi.as_mut(), scratch_space.as_ref());
mod_op.elwise_add_mut(bi.as_mut(), ai.as_ref()); mod_op.elwise_add_mut(bi.as_mut(), ai.as_ref());
}); });
out_rgsw
.iter_rows_mut()
.for_each(|ri| ntt_op.forward(ri.as_mut()));
// println!("RGSW key ex {:?}", &out_rgsw);
out_rgsw
.iter_rows_mut()
.for_each(|ri| ntt_op.backward(ri.as_mut()));
} }
/// Encrypt polynomial m(X) as RLWE ciphertext. /// Encrypt polynomial m(X) as RLWE ciphertext.
@@ -997,23 +982,22 @@ mod tests {
#[test] #[test]
fn rlwe_by_rgsw_works() { fn rlwe_by_rgsw_works() {
let logq = 50; let logq = 24;
let logp = 2; let logp = 2;
let ring_size = 1 << 4; let ring_size = 1 << 4;
let q = generate_prime(logq, ring_size, 1u64 << logq).unwrap(); let q = generate_prime(logq, ring_size, 1u64 << logq).unwrap();
let p = 1u64 << logp; let p = 1u64 << logp;
let d_rgsw = 10; let d_rgsw = 2;
let logb = 5; let logb = 12;
let mut rng = DefaultSecureRng::new_seeded([0u8; 32]); let mut rng = DefaultSecureRng::new_seeded([0u8; 32]);
let s = RlweSecret::random((ring_size >> 1) as usize, ring_size as usize); let s = RlweSecret::random((ring_size >> 1) as usize, ring_size as usize);
let mut m0 = vec![0u64; ring_size as usize]; let mut m0 = vec![0u64; ring_size as usize];
// RandomUniformDist::<[u64]>::random_fill(&mut rng, &(1u64 << logp), RandomUniformDist::<[u64]>::random_fill(&mut rng, &(1u64 << logp), m0.as_mut_slice());
// m0.as_mut_slice());
let mut m1 = vec![0u64; ring_size as usize]; let mut m1 = vec![0u64; ring_size as usize];
// m1[thread_rng().gen_range(0..ring_size) as usize] = 1; m1[thread_rng().gen_range(0..ring_size) as usize] = 1;
let ntt_op = NttBackendU64::new(q, ring_size as usize); let ntt_op = NttBackendU64::new(q, ring_size as usize);
let mod_op = ModularOpsU64::new(q); let mod_op = ModularOpsU64::new(q);
@@ -1041,8 +1025,6 @@ mod tests {
let rgsw_ct = RgswCiphertextEvaluationDomain::<_, DefaultSecureRng, NttBackendU64>::from( let rgsw_ct = RgswCiphertextEvaluationDomain::<_, DefaultSecureRng, NttBackendU64>::from(
&seeded_rgsw_ct, &seeded_rgsw_ct,
); );
// println!("RGSW(m1) seeded: {:?}", &seeded_rgsw_ct);
// println!("RGSW(m1): {:?}", &rgsw_ct);
// Encrypt m0 as RLWE(m0) // Encrypt m0 as RLWE(m0)
let mut rlwe_seed = [0u8; 32]; let mut rlwe_seed = [0u8; 32];
@@ -1062,7 +1044,6 @@ mod tests {
seeded_rlwe_in_ct.seed, seeded_rlwe_in_ct.seed,
&mut rng, &mut rng,
); );
let mut rlwe_in_ct = let mut rlwe_in_ct =
RlweCiphertext::<Vec<Vec<u64>>, DefaultSecureRng>::from(&seeded_rlwe_in_ct); RlweCiphertext::<Vec<Vec<u64>>, DefaultSecureRng>::from(&seeded_rlwe_in_ct);
@@ -1100,7 +1081,6 @@ mod tests {
m0m1, m0m1,
m0m1_back m0m1_back
); );
// dbg!(&m0m1_back, m0m1, q);
} }
// #[test] // #[test]