use poulpy_hal::{ api::{ ScratchAvailable, SvpApplyDftToDft, SvpApplyDftToDftInplace, SvpPPolAllocBytes, SvpPrepare, TakeScalarZnx, TakeSvpPPol, TakeVecZnx, TakeVecZnxDft, VecZnxAddInplace, VecZnxAddNormal, VecZnxBigAddNormal, VecZnxBigAddSmallInplace, VecZnxBigAllocBytes, VecZnxBigNormalize, VecZnxDftAllocBytes, VecZnxDftApply, VecZnxFillUniform, VecZnxIdftApplyConsume, VecZnxNormalize, VecZnxNormalizeInplace, VecZnxNormalizeTmpBytes, VecZnxSub, VecZnxSubInplace, }, layouts::{Backend, DataMut, DataRef, Module, ScalarZnx, Scratch, VecZnx, VecZnxBig, ZnxInfos, ZnxZero}, source::Source, }; use crate::{ dist::Distribution, encryption::{SIGMA, SIGMA_BOUND}, layouts::{ GLWECiphertext, GLWEInfos, GLWEPlaintext, LWEInfos, prepared::{GLWEPublicKeyPrepared, GLWESecretPrepared}, }, }; impl GLWECiphertext> { pub fn encrypt_sk_scratch_space(module: &Module, infos: &A) -> usize where A: GLWEInfos, Module: VecZnxNormalizeTmpBytes + VecZnxDftAllocBytes, { let size: usize = infos.size(); assert_eq!(module.n() as u32, infos.n()); module.vec_znx_normalize_tmp_bytes() + 2 * VecZnx::alloc_bytes(module.n(), 1, size) + module.vec_znx_dft_alloc_bytes(1, size) } pub fn encrypt_pk_scratch_space(module: &Module, infos: &A) -> usize where A: GLWEInfos, Module: VecZnxDftAllocBytes + SvpPPolAllocBytes + VecZnxBigAllocBytes + VecZnxNormalizeTmpBytes, { let size: usize = infos.size(); assert_eq!(module.n() as u32, infos.n()); ((module.vec_znx_dft_alloc_bytes(1, size) + module.vec_znx_big_alloc_bytes(1, size)) | ScalarZnx::alloc_bytes(module.n(), 1)) + module.svp_ppol_alloc_bytes(1) + module.vec_znx_normalize_tmp_bytes() } } impl GLWECiphertext { #[allow(clippy::too_many_arguments)] pub fn encrypt_sk( &mut self, module: &Module, pt: &GLWEPlaintext, sk: &GLWESecretPrepared, source_xa: &mut Source, source_xe: &mut Source, scratch: &mut Scratch, ) where Module: VecZnxDftAllocBytes + VecZnxBigNormalize + VecZnxDftApply + SvpApplyDftToDftInplace + VecZnxIdftApplyConsume + VecZnxNormalizeTmpBytes + VecZnxFillUniform + VecZnxSubInplace + VecZnxAddInplace + VecZnxNormalizeInplace + VecZnxAddNormal + VecZnxNormalize + VecZnxSub, Scratch: TakeVecZnxDft + ScratchAvailable + TakeVecZnx, { #[cfg(debug_assertions)] { assert_eq!(self.rank(), sk.rank()); assert_eq!(sk.n(), self.n()); assert_eq!(pt.n(), self.n()); assert!( scratch.available() >= GLWECiphertext::encrypt_sk_scratch_space(module, self), "scratch.available(): {} < GLWECiphertext::encrypt_sk_scratch_space: {}", scratch.available(), GLWECiphertext::encrypt_sk_scratch_space(module, self) ) } self.encrypt_sk_internal(module, Some((pt, 0)), sk, source_xa, source_xe, scratch); } pub fn encrypt_zero_sk( &mut self, module: &Module, sk: &GLWESecretPrepared, source_xa: &mut Source, source_xe: &mut Source, scratch: &mut Scratch, ) where Module: VecZnxDftAllocBytes + VecZnxBigNormalize + VecZnxDftApply + SvpApplyDftToDftInplace + VecZnxIdftApplyConsume + VecZnxNormalizeTmpBytes + VecZnxFillUniform + VecZnxSubInplace + VecZnxAddInplace + VecZnxNormalizeInplace + VecZnxAddNormal + VecZnxNormalize + VecZnxSub, Scratch: TakeVecZnxDft + ScratchAvailable + TakeVecZnx, { #[cfg(debug_assertions)] { assert_eq!(self.rank(), sk.rank()); assert_eq!(sk.n(), self.n()); assert!( scratch.available() >= GLWECiphertext::encrypt_sk_scratch_space(module, self), "scratch.available(): {} < GLWECiphertext::encrypt_sk_scratch_space: {}", scratch.available(), GLWECiphertext::encrypt_sk_scratch_space(module, self) ) } self.encrypt_sk_internal( module, None::<(&GLWEPlaintext>, usize)>, sk, source_xa, source_xe, scratch, ); } #[allow(clippy::too_many_arguments)] pub(crate) fn encrypt_sk_internal( &mut self, module: &Module, pt: Option<(&GLWEPlaintext, usize)>, sk: &GLWESecretPrepared, source_xa: &mut Source, source_xe: &mut Source, scratch: &mut Scratch, ) where Module: VecZnxDftAllocBytes + VecZnxBigNormalize + VecZnxDftApply + SvpApplyDftToDftInplace + VecZnxIdftApplyConsume + VecZnxNormalizeTmpBytes + VecZnxFillUniform + VecZnxSubInplace + VecZnxAddInplace + VecZnxNormalizeInplace + VecZnxAddNormal + VecZnxNormalize + VecZnxSub, Scratch: TakeVecZnxDft + ScratchAvailable + TakeVecZnx, { let cols: usize = (self.rank() + 1).into(); glwe_encrypt_sk_internal( module, self.base2k().into(), self.k().into(), &mut self.data, cols, false, pt, sk, source_xa, source_xe, SIGMA, scratch, ); } #[allow(clippy::too_many_arguments)] pub fn encrypt_pk( &mut self, module: &Module, pt: &GLWEPlaintext, pk: &GLWEPublicKeyPrepared, source_xu: &mut Source, source_xe: &mut Source, scratch: &mut Scratch, ) where Module: SvpPrepare + SvpApplyDftToDft + VecZnxIdftApplyConsume + VecZnxBigAddNormal + VecZnxBigAddSmallInplace + VecZnxBigNormalize, Scratch: TakeSvpPPol + TakeScalarZnx + TakeVecZnxDft, { self.encrypt_pk_internal::(module, Some((pt, 0)), pk, source_xu, source_xe, scratch); } pub fn encrypt_zero_pk( &mut self, module: &Module, pk: &GLWEPublicKeyPrepared, source_xu: &mut Source, source_xe: &mut Source, scratch: &mut Scratch, ) where Module: SvpPrepare + SvpApplyDftToDft + VecZnxIdftApplyConsume + VecZnxBigAddNormal + VecZnxBigAddSmallInplace + VecZnxBigNormalize, Scratch: TakeSvpPPol + TakeScalarZnx + TakeVecZnxDft, { self.encrypt_pk_internal::, DataPk, B>( module, None::<(&GLWEPlaintext>, usize)>, pk, source_xu, source_xe, scratch, ); } #[allow(clippy::too_many_arguments)] pub(crate) fn encrypt_pk_internal( &mut self, module: &Module, pt: Option<(&GLWEPlaintext, usize)>, pk: &GLWEPublicKeyPrepared, source_xu: &mut Source, source_xe: &mut Source, scratch: &mut Scratch, ) where Module: SvpPrepare + SvpApplyDftToDft + VecZnxIdftApplyConsume + VecZnxBigAddNormal + VecZnxBigAddSmallInplace + VecZnxBigNormalize, Scratch: TakeSvpPPol + TakeScalarZnx + TakeVecZnxDft, { #[cfg(debug_assertions)] { assert_eq!(self.base2k(), pk.base2k()); assert_eq!(self.n(), pk.n()); assert_eq!(self.rank(), pk.rank()); if let Some((pt, _)) = pt { assert_eq!(pt.base2k(), pk.base2k()); assert_eq!(pt.n(), pk.n()); } } let base2k: usize = pk.base2k().into(); let size_pk: usize = pk.size(); let cols: usize = (self.rank() + 1).into(); // Generates u according to the underlying secret distribution. let (mut u_dft, scratch_1) = scratch.take_svp_ppol(self.n().into(), 1); { let (mut u, _) = scratch_1.take_scalar_znx(self.n().into(), 1); match pk.dist { Distribution::NONE => panic!( "invalid public key: SecretDistribution::NONE, ensure it has been correctly intialized through \ Self::generate" ), Distribution::TernaryFixed(hw) => u.fill_ternary_hw(0, hw, source_xu), Distribution::TernaryProb(prob) => u.fill_ternary_prob(0, prob, source_xu), Distribution::BinaryFixed(hw) => u.fill_binary_hw(0, hw, source_xu), Distribution::BinaryProb(prob) => u.fill_binary_prob(0, prob, source_xu), Distribution::BinaryBlock(block_size) => u.fill_binary_block(0, block_size, source_xu), Distribution::ZERO => {} } module.svp_prepare(&mut u_dft, 0, &u, 0); } // ct[i] = pk[i] * u + ei (+ m if col = i) (0..cols).for_each(|i| { let (mut ci_dft, scratch_2) = scratch_1.take_vec_znx_dft(self.n().into(), 1, size_pk); // ci_dft = DFT(u) * DFT(pk[i]) module.svp_apply_dft_to_dft(&mut ci_dft, 0, &u_dft, 0, &pk.data, i); // ci_big = u * p[i] let mut ci_big = module.vec_znx_idft_apply_consume(ci_dft); // ci_big = u * pk[i] + e module.vec_znx_big_add_normal( base2k, &mut ci_big, 0, pk.k().into(), source_xe, SIGMA, SIGMA_BOUND, ); // ci_big = u * pk[i] + e + m (if col = i) if let Some((pt, col)) = pt && col == i { module.vec_znx_big_add_small_inplace(&mut ci_big, 0, &pt.data, 0); } // ct[i] = norm(ci_big) module.vec_znx_big_normalize(base2k, &mut self.data, i, base2k, &ci_big, 0, scratch_2); }); } } #[allow(clippy::too_many_arguments)] pub(crate) fn glwe_encrypt_sk_internal( module: &Module, base2k: usize, k: usize, ct: &mut VecZnx, cols: usize, compressed: bool, pt: Option<(&GLWEPlaintext, usize)>, sk: &GLWESecretPrepared, source_xa: &mut Source, source_xe: &mut Source, sigma: f64, scratch: &mut Scratch, ) where Module: VecZnxDftAllocBytes + VecZnxBigNormalize + VecZnxDftApply + SvpApplyDftToDftInplace + VecZnxIdftApplyConsume + VecZnxNormalizeTmpBytes + VecZnxFillUniform + VecZnxSubInplace + VecZnxAddInplace + VecZnxNormalizeInplace + VecZnxAddNormal + VecZnxNormalize + VecZnxSub, Scratch: TakeVecZnxDft + ScratchAvailable + TakeVecZnx, { #[cfg(debug_assertions)] { if compressed { assert_eq!( ct.cols(), 1, "invalid ciphertext: compressed tag=true but #cols={} != 1", ct.cols() ) } } let size: usize = ct.size(); let (mut c0, scratch_1) = scratch.take_vec_znx(ct.n(), 1, size); c0.zero(); { let (mut ci, scratch_2) = scratch_1.take_vec_znx(ct.n(), 1, size); // ct[i] = uniform // ct[0] -= c[i] * s[i], (1..cols).for_each(|i| { let col_ct: usize = if compressed { 0 } else { i }; // ct[i] = uniform (+ pt) module.vec_znx_fill_uniform(base2k, ct, col_ct, source_xa); let (mut ci_dft, scratch_3) = scratch_2.take_vec_znx_dft(ct.n(), 1, size); // ci = ct[i] - pt // i.e. we act as we sample ct[i] already as uniform + pt // and if there is a pt, then we subtract it before applying DFT if let Some((pt, col)) = pt { if i == col { module.vec_znx_sub(&mut ci, 0, ct, col_ct, &pt.data, 0); module.vec_znx_normalize_inplace(base2k, &mut ci, 0, scratch_3); module.vec_znx_dft_apply(1, 0, &mut ci_dft, 0, &ci, 0); } else { module.vec_znx_dft_apply(1, 0, &mut ci_dft, 0, ct, col_ct); } } else { module.vec_znx_dft_apply(1, 0, &mut ci_dft, 0, ct, col_ct); } module.svp_apply_dft_to_dft_inplace(&mut ci_dft, 0, &sk.data, i - 1); let ci_big: VecZnxBig<&mut [u8], B> = module.vec_znx_idft_apply_consume(ci_dft); // use c[0] as buffer, which is overwritten later by the normalization step module.vec_znx_big_normalize(base2k, &mut ci, 0, base2k, &ci_big, 0, scratch_3); // c0_tmp = -c[i] * s[i] (use c[0] as buffer) module.vec_znx_sub_inplace(&mut c0, 0, &ci, 0); }); } // c[0] += e module.vec_znx_add_normal(base2k, &mut c0, 0, k, source_xe, sigma, SIGMA_BOUND); // c[0] += m if col = 0 if let Some((pt, col)) = pt && col == 0 { module.vec_znx_add_inplace(&mut c0, 0, &pt.data, 0); } // c[0] = norm(c[0]) module.vec_znx_normalize(base2k, ct, 0, base2k, &c0, 0, scratch_1); }