Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

What is/are difference/s between leveled Fully Homomorphic Encryption and normal Fully Homomorphic Encryption?

share|improve this question
add comment

1 Answer 1

FHE should be able to evaluate any circuit. Leveled FHE can evaluate circuits which have a bounded depth.

BGV was, I believe, the first to offer leveled FHE. The gain was in performance. By restricting to only certain depths (where the depth is calculated by looking at multiplication gates), they were able to remove the bootstrapping operation of Gentry's construction (which was very expensive) or at least spread out the bootstrapping.

Another benefit for leveled schemes is that you can remove the assumption of circular security, i.e., that you can safely encrypt your private key with your public key. We don't know (as far as I remember) how safe this is. Note that we can convert a leveled-FHE to an FHE scheme if we assume circular security though (see footnote 1 in the BGV paper).

share|improve this answer
2  
I think leveled FHE also avoids the assumption of circular-security. $\;$ –  Ricky Demer Apr 24 at 18:46
    
@RickyDemer I believe you are right. –  mikeazo Apr 24 at 18:47
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.