use backend::{ AddNormal, FFT64, FillUniform, Module, ScalarZnxAlloc, ScalarZnxDftAlloc, ScalarZnxDftOps, Scratch, VecZnxAlloc, VecZnxBig, VecZnxBigAlloc, VecZnxBigOps, VecZnxBigScratch, VecZnxDftAlloc, VecZnxDftOps, VecZnxOps, ZnxZero, }; use sampling::source::Source; use crate::{FourierGLWESecret, GLWECiphertext, GLWEPlaintext, GLWEPublicKey, Infos, SIX_SIGMA, dist::Distribution, div_ceil}; impl GLWECiphertext> { pub fn encrypt_sk_scratch_space(module: &Module, basek: usize, k: usize) -> usize { let size: usize = div_ceil(k, basek); module.vec_znx_big_normalize_tmp_bytes() + module.bytes_of_vec_znx_dft(1, size) + module.bytes_of_vec_znx(1, size) } pub fn encrypt_pk_scratch_space(module: &Module, basek: usize, k: usize) -> usize { let size: usize = div_ceil(k, basek); ((module.bytes_of_vec_znx_dft(1, size) + module.bytes_of_vec_znx_big(1, size)) | module.bytes_of_scalar_znx(1)) + module.bytes_of_scalar_znx_dft(1) + module.vec_znx_big_normalize_tmp_bytes() } } impl + AsMut<[u8]>> GLWECiphertext { pub fn encrypt_sk, DataSk: AsRef<[u8]>>( &mut self, module: &Module, pt: &GLWEPlaintext, sk: &FourierGLWESecret, source_xa: &mut Source, source_xe: &mut Source, sigma: f64, scratch: &mut Scratch, ) { self.encrypt_sk_private( module, Some((pt, 0)), sk, source_xa, source_xe, sigma, scratch, ); } pub fn encrypt_zero_sk>( &mut self, module: &Module, sk: &FourierGLWESecret, source_xa: &mut Source, source_xe: &mut Source, sigma: f64, scratch: &mut Scratch, ) { self.encrypt_sk_private( module, None::<(&GLWEPlaintext>, usize)>, sk, source_xa, source_xe, sigma, scratch, ); } pub fn encrypt_pk, DataPk: AsRef<[u8]>>( &mut self, module: &Module, pt: &GLWEPlaintext, pk: &GLWEPublicKey, source_xu: &mut Source, source_xe: &mut Source, sigma: f64, scratch: &mut Scratch, ) { self.encrypt_pk_private( module, Some((pt, 0)), pk, source_xu, source_xe, sigma, scratch, ); } pub fn encrypt_zero_pk>( &mut self, module: &Module, pk: &GLWEPublicKey, source_xu: &mut Source, source_xe: &mut Source, sigma: f64, scratch: &mut Scratch, ) { self.encrypt_pk_private( module, None::<(&GLWEPlaintext>, usize)>, pk, source_xu, source_xe, sigma, scratch, ); } pub(crate) fn encrypt_sk_private, DataSk: AsRef<[u8]>>( &mut self, module: &Module, pt: Option<(&GLWEPlaintext, usize)>, sk: &FourierGLWESecret, source_xa: &mut Source, source_xe: &mut Source, sigma: f64, scratch: &mut Scratch, ) { #[cfg(debug_assertions)] { assert_eq!(self.rank(), sk.rank()); assert_eq!(sk.n(), module.n()); assert_eq!(self.n(), module.n()); if let Some((pt, col)) = pt { assert_eq!(pt.n(), module.n()); assert!(col < self.rank() + 1); } assert!( scratch.available() >= GLWECiphertext::encrypt_sk_scratch_space(module, self.basek(), self.k()), "scratch.available(): {} < GLWECiphertext::encrypt_sk_scratch_space: {}", scratch.available(), GLWECiphertext::encrypt_sk_scratch_space(module, self.basek(), self.k()) ) } let basek: usize = self.basek(); let k: usize = self.k(); let size: usize = self.size(); let cols: usize = self.rank() + 1; let (mut c0_big, scratch_1) = scratch.tmp_vec_znx(module, 1, size); c0_big.zero(); { // c[i] = uniform // c[0] -= c[i] * s[i], (1..cols).for_each(|i| { let (mut ci_dft, scratch_2) = scratch_1.tmp_vec_znx_dft(module, 1, size); // c[i] = uniform self.data.fill_uniform(basek, i, size, source_xa); // c[i] = norm(IDFT(DFT(c[i]) * DFT(s[i]))) module.vec_znx_dft(1, 0, &mut ci_dft, 0, &self.data, i); module.svp_apply_inplace(&mut ci_dft, 0, &sk.data, i - 1); let ci_big: VecZnxBig<&mut [u8], FFT64> = module.vec_znx_idft_consume(ci_dft); // use c[0] as buffer, which is overwritten later by the normalization step module.vec_znx_big_normalize(basek, &mut self.data, 0, &ci_big, 0, scratch_2); // c0_tmp = -c[i] * s[i] (use c[0] as buffer) module.vec_znx_sub_ab_inplace(&mut c0_big, 0, &self.data, 0); // c[i] += m if col = i if let Some((pt, col)) = pt { if i == col { module.vec_znx_add_inplace(&mut self.data, i, &pt.data, 0); module.vec_znx_normalize_inplace(basek, &mut self.data, i, scratch_2); } } }); } // c[0] += e c0_big.add_normal(basek, 0, k, source_xe, sigma, sigma * SIX_SIGMA); // c[0] += m if col = 0 if let Some((pt, col)) = pt { if col == 0 { module.vec_znx_add_inplace(&mut c0_big, 0, &pt.data, 0); } } // c[0] = norm(c[0]) module.vec_znx_normalize(basek, &mut self.data, 0, &c0_big, 0, scratch_1); } pub(crate) fn encrypt_pk_private, DataPk: AsRef<[u8]>>( &mut self, module: &Module, pt: Option<(&GLWEPlaintext, usize)>, pk: &GLWEPublicKey, source_xu: &mut Source, source_xe: &mut Source, sigma: f64, scratch: &mut Scratch, ) { #[cfg(debug_assertions)] { assert_eq!(self.basek(), pk.basek()); assert_eq!(self.n(), module.n()); assert_eq!(pk.n(), module.n()); assert_eq!(self.rank(), pk.rank()); if let Some((pt, _)) = pt { assert_eq!(pt.basek(), pk.basek()); assert_eq!(pt.n(), module.n()); } } let basek: usize = pk.basek(); let size_pk: usize = pk.size(); let cols: usize = self.rank() + 1; // Generates u according to the underlying secret distribution. let (mut u_dft, scratch_1) = scratch.tmp_scalar_znx_dft(module, 1); { let (mut u, _) = scratch_1.tmp_scalar_znx(module, 1); match pk.dist { Distribution::NONE => panic!( "invalid public key: SecretDistribution::NONE, ensure it has been correctly intialized through \ Self::generate" ), Distribution::TernaryFixed(hw) => u.fill_ternary_hw(0, hw, source_xu), Distribution::TernaryProb(prob) => u.fill_ternary_prob(0, prob, source_xu), Distribution::BinaryFixed(hw) => u.fill_binary_hw(0, hw, source_xu), Distribution::BinaryProb(prob) => u.fill_binary_prob(0, prob, source_xu), Distribution::BinaryBlock(block_size) => u.fill_binary_block(0, block_size, source_xu), Distribution::ZERO => {} } module.svp_prepare(&mut u_dft, 0, &u, 0); } // ct[i] = pk[i] * u + ei (+ m if col = i) (0..cols).for_each(|i| { let (mut ci_dft, scratch_2) = scratch_1.tmp_vec_znx_dft(module, 1, size_pk); // ci_dft = DFT(u) * DFT(pk[i]) module.svp_apply(&mut ci_dft, 0, &u_dft, 0, &pk.data.data, i); // ci_big = u * p[i] let mut ci_big = module.vec_znx_idft_consume(ci_dft); // ci_big = u * pk[i] + e ci_big.add_normal(basek, 0, pk.k(), source_xe, sigma, sigma * SIX_SIGMA); // ci_big = u * pk[i] + e + m (if col = i) if let Some((pt, col)) = pt { if col == i { module.vec_znx_big_add_small_inplace(&mut ci_big, 0, &pt.data, 0); } } // ct[i] = norm(ci_big) module.vec_znx_big_normalize(basek, &mut self.data, i, &ci_big, 0, scratch_2); }); } }