use poulpy_core::{ GLWEAdd, GLWECopy, GLWEDecrypt, GLWEEncryptSk, GLWENoise, GLWEPacking, GLWERotate, GLWESub, GLWETrace, LWEFromGLWE, ScratchTakeCore, layouts::{ Base2K, Degree, GGLWEInfos, GGLWEPreparedToRef, GLWE, GLWEAutomorphismKeyHelper, GLWEInfos, GLWEPlaintextLayout, GLWESecretPreparedToRef, GLWEToMut, GLWEToRef, GetGaloisElement, LWEInfos, LWEToMut, Rank, TorusPrecision, }, }; use poulpy_hal::{ api::ModuleLogN, layouts::{Backend, Data, DataMut, DataRef, Scratch}, source::Source, }; use std::{collections::HashMap, marker::PhantomData}; use crate::tfhe::bdd_arithmetic::{Cmux, FheUintPrepared, FromBits, GetGGSWBit, ToBits, UnsignedInteger}; /// An FHE ciphertext encrypting the bits of an [UnsignedInteger]. pub struct FheUint { pub(crate) bits: GLWE, pub(crate) _phantom: PhantomData, } impl FheUint, T> { pub fn alloc_from_infos(infos: &A) -> Self where A: GLWEInfos, { Self::alloc(infos.n(), infos.base2k(), infos.k(), infos.rank()) } pub fn alloc(n: Degree, base2k: Base2K, k: TorusPrecision, rank: Rank) -> Self { Self { bits: GLWE::alloc(n, base2k, k, rank), _phantom: PhantomData, } } } impl<'a, T: UnsignedInteger> FheUint<&'a mut [u8], T> { pub fn from_glwe_to_mut(glwe: &'a mut G) -> Self where G: GLWEToMut, { FheUint { bits: glwe.to_mut(), _phantom: PhantomData, } } } impl LWEInfos for FheUint { fn base2k(&self) -> poulpy_core::layouts::Base2K { self.bits.base2k() } fn k(&self) -> poulpy_core::layouts::TorusPrecision { self.bits.k() } fn n(&self) -> poulpy_core::layouts::Degree { self.bits.n() } } impl GLWEInfos for FheUint { fn rank(&self) -> poulpy_core::layouts::Rank { self.bits.rank() } } impl FheUint { pub fn encrypt_sk( &mut self, module: &M, data: T, sk: &S, source_xa: &mut Source, source_xe: &mut Source, scratch: &mut Scratch, ) where S: GLWESecretPreparedToRef + GLWEInfos, M: ModuleLogN + GLWEEncryptSk, Scratch: ScratchTakeCore, { #[cfg(debug_assertions)] { assert!(module.n().is_multiple_of(T::BITS as usize)); assert_eq!(self.n(), module.n() as u32); assert_eq!(sk.n(), module.n() as u32); } let mut data_bits: Vec = vec![0i64; module.n()]; let log_gap: usize = module.log_n() - T::LOG_BITS as usize; // Interleaves bytes for i in 0..T::BITS as usize { data_bits[T::bit_index(i) << log_gap] = data.bit(i) as i64 } let pt_infos = GLWEPlaintextLayout { n: self.n(), base2k: self.base2k(), k: 2_usize.into(), }; let (mut pt, scratch_1) = scratch.take_glwe_plaintext(&pt_infos); pt.encode_vec_i64(&data_bits, TorusPrecision(2)); self.bits .encrypt_sk(module, &pt, sk, source_xa, source_xe, scratch_1); } } impl FheUint { pub fn noise(&self, module: &M, want: u32, sk: &S, scratch: &mut Scratch) -> f64 where S: GLWESecretPreparedToRef + GLWEInfos, M: ModuleLogN + GLWEDecrypt + GLWENoise, Scratch: ScratchTakeCore, { #[cfg(debug_assertions)] { assert!(module.n().is_multiple_of(T::BITS as usize)); assert_eq!(self.n(), module.n() as u32); assert_eq!(sk.n(), module.n() as u32); } let (mut pt, scratch_1) = scratch.take_glwe_plaintext(self); let mut data_bits = vec![0i64; module.n()]; let log_gap: usize = module.log_n() - T::LOG_BITS as usize; for i in 0..T::BITS as usize { data_bits[T::bit_index(i) << log_gap] = want.bit(i) as i64 } pt.encode_vec_i64(&data_bits, TorusPrecision(2)); self.bits.noise(module, sk, &pt, scratch_1) } pub fn decrypt(&self, module: &M, sk: &S, scratch: &mut Scratch) -> T where S: GLWESecretPreparedToRef + GLWEInfos, M: ModuleLogN + GLWEDecrypt, Scratch: ScratchTakeCore, { #[cfg(debug_assertions)] { assert!(module.n().is_multiple_of(T::BITS as usize)); assert_eq!(self.n(), module.n() as u32); assert_eq!(sk.n(), module.n() as u32); } let pt_infos = GLWEPlaintextLayout { n: self.n(), base2k: self.base2k(), k: 1_usize.into(), }; let (mut pt, scratch_1) = scratch.take_glwe_plaintext(&pt_infos); self.bits.decrypt(module, &mut pt, sk, scratch_1); let mut data_bits: Vec = vec![0i64; module.n()]; pt.decode_vec_i64(&mut data_bits, TorusPrecision(2)); let mut bits: Vec = vec![0u8; T::BITS as usize]; let log_gap: usize = module.log_n() - T::LOG_BITS as usize; // Retrives from interleaved bytes for i in 0..T::BITS as usize { bits[i] = data_bits[T::bit_index(i) << log_gap] as u8 } T::from_bits(&bits) } } impl FheUint { /// Packs Vec into [FheUint]. pub fn pack(&mut self, module: &M, mut bits: Vec, keys: &H, scratch: &mut Scratch) where G: GLWEToMut + GLWEToRef + GLWEInfos, M: ModuleLogN + GLWEPacking + GLWECopy, K: GGLWEPreparedToRef + GetGaloisElement + GGLWEInfos, H: GLWEAutomorphismKeyHelper, Scratch: ScratchTakeCore, { // Repacks the GLWE ciphertexts bits let log_gap: usize = module.log_n() - T::LOG_BITS as usize; let mut cts: HashMap = HashMap::new(); for (i, ct) in bits.iter_mut().enumerate().take(T::BITS as usize) { cts.insert(T::bit_index(i) << log_gap, ct); } module.glwe_pack(&mut self.bits, cts, log_gap, keys, scratch); } #[allow(clippy::too_many_arguments)] // Self <- ((a.rotate_right(dst<<4) & 0xFFFF_0000) | (b.rotate_right(src<<4) & 0x0000_FFFF)).rotate_left(dst<<4); pub fn splice_u16( &mut self, module: &M, dst: usize, src: usize, a: &A, b: &B, keys: &H, scratch: &mut Scratch, ) where A: GLWEToRef + GLWEInfos, B: GLWEToRef + GLWEInfos, H: GLWEAutomorphismKeyHelper, K: GGLWEPreparedToRef + GGLWEInfos + GetGaloisElement, M: ModuleLogN + GLWERotate + GLWETrace + GLWESub + GLWEAdd + GLWECopy, Scratch: ScratchTakeBDD, { assert!(dst < (T::BITS >> 4) as usize); assert!(src < (T::BITS >> 4) as usize); let (mut tmp, scratch_1) = scratch.take_fhe_uint(self); tmp.splice_u8(module, dst << 1, src << 1, a, b, keys, scratch_1); self.splice_u8( module, (dst << 1) + 1, (src << 1) + 1, &tmp, b, keys, scratch_1, ); } #[allow(clippy::too_many_arguments)] // Self <- ((a.rotate_right(dst<<3) & 0xFFFF_FF00) | (b.rotate_right(src<<3) & 0x0000_00FF)).rotate_left(dst<<3); pub fn splice_u8( &mut self, module: &M, dst: usize, src: usize, a: &A, b: &B, keys: &H, scratch: &mut Scratch, ) where A: GLWEToRef + GLWEInfos, B: GLWEToRef + GLWEInfos, H: GLWEAutomorphismKeyHelper, K: GGLWEPreparedToRef + GGLWEInfos + GetGaloisElement, M: ModuleLogN + GLWERotate + GLWETrace + GLWESub + GLWEAdd + GLWECopy, Scratch: ScratchTakeBDD, { assert!(dst < (T::BITS >> 3) as usize); assert!(src < (T::BITS >> 3) as usize); // 1) Zero the byte receiver let log_gap: usize = module.log_n() - T::LOG_BITS as usize; let trace_start = (T::LOG_BITS - T::LOG_BYTES) as usize; let rot: i64 = (T::bit_index(dst << 3) << log_gap) as i64; module.glwe_copy(self, a); self.zero_byte(module, dst, keys, scratch); // Isolate the byte to transfer from a let (mut tmp_fhe_uint_byte, scratch_1) = scratch.take_fhe_uint(b); // Move a[byte_a] into a[dst] module.glwe_rotate( -((T::bit_index(src << 3) << log_gap) as i64), &mut tmp_fhe_uint_byte, b, ); // Zeroes all other bytes module.glwe_trace_inplace(&mut tmp_fhe_uint_byte, trace_start, keys, scratch_1); // Moves back self[0] to self[byte_tg] module.glwe_rotate_inplace(rot, &mut tmp_fhe_uint_byte, scratch_1); // Add self[0] += a[0] module.glwe_add_inplace(&mut self.bits, &tmp_fhe_uint_byte); } } impl GLWEToMut for FheUint { fn to_mut(&mut self) -> GLWE<&mut [u8]> { self.bits.to_mut() } } pub trait ScratchTakeBDD where Self: ScratchTakeCore, { fn take_fhe_uint(&mut self, infos: &A) -> (FheUint<&mut [u8], T>, &mut Self) where A: GLWEInfos, { let (glwe, scratch) = self.take_glwe(infos); ( FheUint { bits: glwe, _phantom: PhantomData, }, scratch, ) } } impl ScratchTakeBDD for Scratch where Self: ScratchTakeCore {} impl FheUint { pub fn get_bit_lwe(&self, module: &M, bit: usize, res: &mut R, ks: &K, scratch: &mut Scratch) where R: LWEToMut, K: GGLWEPreparedToRef + GGLWEInfos, M: ModuleLogN + LWEFromGLWE + GLWERotate, Scratch: ScratchTakeCore, { let log_gap: usize = module.log_n() - T::LOG_BITS as usize; res.to_mut() .from_glwe(module, self, T::bit_index(bit) << log_gap, ks, scratch); } pub fn get_bit_glwe(&self, module: &M, bit: usize, res: &mut R, keys: &H, scratch: &mut Scratch) where R: GLWEToMut, K: GGLWEPreparedToRef + GGLWEInfos, M: ModuleLogN + GLWERotate + GLWETrace, H: GLWEAutomorphismKeyHelper, K: GGLWEPreparedToRef + GGLWEInfos + GetGaloisElement, Scratch: ScratchTakeCore, { let log_gap: usize = module.log_n() - T::LOG_BITS as usize; let rot = (T::bit_index(bit) << log_gap) as i64; module.glwe_rotate(-rot, res, self); module.glwe_trace_inplace(res, 0, keys, scratch); } pub fn get_byte(&self, module: &M, byte: usize, res: &mut R, keys: &H, scratch: &mut Scratch) where R: GLWEToMut, K: GGLWEPreparedToRef + GGLWEInfos, M: ModuleLogN + GLWERotate + GLWETrace, H: GLWEAutomorphismKeyHelper, K: GGLWEPreparedToRef + GGLWEInfos + GetGaloisElement, Scratch: ScratchTakeCore, { let log_gap: usize = module.log_n() - T::LOG_BITS as usize; let trace_start = (T::LOG_BITS - T::LOG_BYTES) as usize; let rot = (T::bit_index(byte << 3) << log_gap) as i64; module.glwe_rotate(-rot, res, self); module.glwe_trace_inplace(res, trace_start, keys, scratch); } } impl GLWEToRef for FheUint { fn to_ref(&self) -> GLWE<&[u8]> { self.bits.to_ref() } } impl FheUint { pub fn from_fhe_uint_prepared( &mut self, module: &M, other: &FheUintPrepared, keys: &H, scratch: &mut Scratch, ) where DR: DataRef, M: Cmux + ModuleLogN + GLWEPacking + GLWECopy, Scratch: ScratchTakeCore, K: GGLWEPreparedToRef + GetGaloisElement + GGLWEInfos, H: GLWEAutomorphismKeyHelper, { let zero: GLWE> = GLWE::alloc_from_infos(self); let mut one: GLWE> = GLWE::alloc_from_infos(self); one.data_mut() .encode_coeff_i64(self.base2k().into(), 0, 2, 0, 1); let (mut out_bits, scratch_1) = scratch.take_glwe_slice(T::BITS as usize, self); for i in 0..T::BITS as usize { module.cmux(&mut out_bits[i], &one, &zero, &other.get_bit(i), scratch_1); } self.pack(module, out_bits, keys, scratch_1); } pub fn zero_byte(&mut self, module: &M, byte: usize, keys: &H, scratch: &mut Scratch) where H: GLWEAutomorphismKeyHelper, K: GGLWEPreparedToRef + GGLWEInfos + GetGaloisElement, M: ModuleLogN + GLWERotate + GLWETrace + GLWESub + GLWEAdd + GLWECopy, Scratch: ScratchTakeBDD, { let log_gap: usize = module.log_n() - T::LOG_BITS as usize; let trace_start = (T::LOG_BITS - T::LOG_BYTES) as usize; let rot: i64 = (T::bit_index(byte << 3) << log_gap) as i64; // Move a to self and align byte module.glwe_rotate_inplace(-rot, &mut self.bits, scratch); // Stores this byte (everything else zeroed) into tmp_trace let (mut tmp_trace, scratch_1) = scratch.take_glwe(self); module.glwe_trace(&mut tmp_trace, trace_start, self, keys, scratch_1); // Subtracts to self to zero it module.glwe_sub_inplace(&mut self.bits, &tmp_trace); // Move a to self and align byte module.glwe_rotate_inplace(rot, &mut self.bits, scratch); } pub fn sext(&mut self, module: &M, byte: usize, keys: &H, scratch: &mut Scratch) where M:, H: GLWEAutomorphismKeyHelper, K: GGLWEPreparedToRef + GGLWEInfos + GetGaloisElement, BE: Backend, M: ModuleLogN + GLWERotate + GLWETrace + GLWEAdd + GLWESub + GLWECopy, Scratch: ScratchTakeCore, { assert!(byte < (1 << T::LOG_BYTES)); let log_gap: usize = module.log_n() - T::LOG_BITS as usize; let rot: i64 = (T::bit_index(byte << 3) << log_gap) as i64; let (mut sext, scratch_1) = scratch.take_glwe(self); // Extract MSB module.glwe_rotate(-rot, &mut sext, &self.bits); module.glwe_trace_inplace(&mut sext, 0, keys, scratch_1); // Replicates MSB in byte for i in 0..3 { let (mut tmp, _) = scratch_1.take_glwe(self); module.glwe_rotate(((1 << T::LOG_BYTES) << log_gap) << i, &mut tmp, &sext); module.glwe_add_inplace(&mut sext, &tmp); } // Splice sext let (mut tmp, scratch_2) = scratch_1.take_glwe(self); for i in byte..(1 << T::LOG_BYTES) as usize { FheUint::<&mut [u8], T>::from_glwe_to_mut(&mut tmp).splice_u8(module, i, 0, &self.bits, &sext, keys, scratch_2); module.glwe_copy(&mut self.bits, &tmp); } } }