use std::collections::HashMap; use poulpy_hal::{ api::{ ScratchOwnedAlloc, ScratchOwnedBorrow, SvpApplyDftToDftInplace, SvpPPolAlloc, SvpPPolAllocBytes, SvpPrepare, VecZnxAddInplace, VecZnxAddNormal, VecZnxAddScalarInplace, VecZnxAutomorphism, VecZnxBigAddInplace, VecZnxBigAddSmallInplace, VecZnxBigAllocBytes, VecZnxBigAutomorphismInplace, VecZnxBigNormalize, VecZnxBigNormalizeTmpBytes, VecZnxBigSubSmallNegateInplace, VecZnxCopy, VecZnxDftAllocBytes, VecZnxDftApply, VecZnxFillUniform, VecZnxIdftApplyConsume, VecZnxNormalize, VecZnxNormalizeInplace, VecZnxNormalizeTmpBytes, VecZnxRotateInplace, VecZnxRshInplace, VecZnxSub, VecZnxSubInplace, VecZnxSwitchRing, VmpApplyDftToDft, VmpApplyDftToDftAdd, VmpApplyDftToDftTmpBytes, VmpPMatAlloc, VmpPrepare, }, layouts::{Backend, Module, ScratchOwned, ZnxView, ZnxViewMut}, oep::{ ScratchAvailableImpl, ScratchOwnedAllocImpl, ScratchOwnedBorrowImpl, TakeScalarZnxImpl, TakeSvpPPolImpl, TakeVecZnxBigImpl, TakeVecZnxDftImpl, TakeVecZnxImpl, }, source::Source, }; use crate::{ encryption::SIGMA, layouts::{ AutomorphismKey, AutomorphismKeyLayout, GLWE, GLWELayout, GLWEPlaintext, GLWESecret, LWEInfos, prepared::{AutomorphismKeyPrepared, GLWESecretPrepared, PrepareAlloc}, }, noise::var_noise_gglwe_product, }; pub fn test_glwe_trace_inplace(module: &Module) where Module: VecZnxDftAllocBytes + VecZnxAutomorphism + VecZnxBigAutomorphismInplace + VecZnxBigSubSmallNegateInplace + VecZnxRshInplace + VecZnxRotateInplace + VecZnxBigNormalize + VecZnxDftApply + SvpApplyDftToDftInplace + VecZnxIdftApplyConsume + VecZnxFillUniform + VecZnxSubInplace + VecZnxAddInplace + VecZnxNormalizeInplace + VecZnxAddNormal + VecZnxNormalize + VecZnxSub + SvpPrepare + SvpPPolAllocBytes + SvpPPolAlloc + VecZnxBigAllocBytes + VecZnxBigAddInplace + VecZnxBigAddSmallInplace + VecZnxNormalizeTmpBytes + VecZnxAddScalarInplace + VmpPMatAlloc + VmpPrepare + VmpApplyDftToDftTmpBytes + VmpApplyDftToDft + VmpApplyDftToDftAdd + VecZnxBigNormalizeTmpBytes + VecZnxSwitchRing + VecZnxCopy, B: Backend + TakeVecZnxDftImpl + TakeVecZnxBigImpl + TakeSvpPPolImpl + ScratchOwnedAllocImpl + ScratchOwnedBorrowImpl + ScratchAvailableImpl + TakeScalarZnxImpl + TakeVecZnxImpl, { let base2k: usize = 8; let k: usize = 54; for rank in 1_usize..3 { let n: usize = module.n(); let k_autokey: usize = k + base2k; let dsize: usize = 1; let dnum: usize = k.div_ceil(base2k * dsize); let glwe_out_infos: GLWELayout = GLWELayout { n: n.into(), base2k: base2k.into(), k: k.into(), rank: rank.into(), }; let key_infos: AutomorphismKeyLayout = AutomorphismKeyLayout { n: n.into(), base2k: base2k.into(), k: k_autokey.into(), rank: rank.into(), dsize: dsize.into(), dnum: dnum.into(), }; let mut glwe_out: GLWE> = GLWE::alloc_from_infos(&glwe_out_infos); let mut pt_want: GLWEPlaintext> = GLWEPlaintext::alloc_from_infos(&glwe_out_infos); let mut pt_have: GLWEPlaintext> = GLWEPlaintext::alloc_from_infos(&glwe_out_infos); let mut source_xs: Source = Source::new([0u8; 32]); let mut source_xe: Source = Source::new([0u8; 32]); let mut source_xa: Source = Source::new([0u8; 32]); let mut scratch: ScratchOwned = ScratchOwned::alloc( GLWE::encrypt_sk_scratch_space(module, &glwe_out_infos) | GLWE::decrypt_scratch_space(module, &glwe_out_infos) | AutomorphismKey::encrypt_sk_scratch_space(module, &key_infos) | GLWE::trace_inplace_scratch_space(module, &glwe_out_infos, &key_infos), ); let mut sk: GLWESecret> = GLWESecret::alloc_from_infos(&glwe_out_infos); sk.fill_ternary_prob(0.5, &mut source_xs); let sk_dft: GLWESecretPrepared, B> = sk.prepare_alloc(module, scratch.borrow()); let mut data_want: Vec = vec![0i64; n]; data_want .iter_mut() .for_each(|x| *x = source_xa.next_i64() & 0xFF); module.vec_znx_fill_uniform(base2k, &mut pt_have.data, 0, &mut source_xa); glwe_out.encrypt_sk( module, &pt_have, &sk_dft, &mut source_xa, &mut source_xe, scratch.borrow(), ); let mut auto_keys: HashMap, B>> = HashMap::new(); let gal_els: Vec = GLWE::trace_galois_elements(module); let mut tmp: AutomorphismKey> = AutomorphismKey::alloc_from_infos(&key_infos); gal_els.iter().for_each(|gal_el| { tmp.encrypt_sk( module, *gal_el, &sk, &mut source_xa, &mut source_xe, scratch.borrow(), ); let atk_prepared: AutomorphismKeyPrepared, B> = tmp.prepare_alloc(module, scratch.borrow()); auto_keys.insert(*gal_el, atk_prepared); }); glwe_out.trace_inplace(module, 0, 5, &auto_keys, scratch.borrow()); glwe_out.trace_inplace(module, 5, module.log_n(), &auto_keys, scratch.borrow()); (0..pt_want.size()).for_each(|i| pt_want.data.at_mut(0, i)[0] = pt_have.data.at(0, i)[0]); glwe_out.decrypt(module, &mut pt_have, &sk_dft, scratch.borrow()); module.vec_znx_sub_inplace(&mut pt_want.data, 0, &pt_have.data, 0); module.vec_znx_normalize_inplace(base2k, &mut pt_want.data, 0, scratch.borrow()); let noise_have: f64 = pt_want.std().log2(); let mut noise_want: f64 = var_noise_gglwe_product( n as f64, base2k, 0.5, 0.5, 1.0 / 12.0, SIGMA * SIGMA, 0.0, rank as f64, k, k_autokey, ); noise_want += SIGMA * SIGMA * (-2.0 * (k) as f64).exp2(); noise_want += n as f64 * 1.0 / 12.0 * 0.5 * rank as f64 * (-2.0 * (k) as f64).exp2(); noise_want = noise_want.sqrt().log2(); assert!( (noise_have - noise_want).abs() < 1.0, "{noise_have} > {noise_want}" ); } }