# Is full Homomorphic encryption quantum resistant?

Since most of our asymmetric encryption algorithms are going to be out-of-date in a couple of year due to Shor's algorithm, I was wondering about the future of FHE schemes. I have found this paper, which states:

"It is impossible to construct secure group homomorphic encryption in the quantum world, if the plain-text and cipher-text spaces form abelian groups."

And I'm asking: are there any candidates which are also quantum resistant?

• As the authors of the paper write of known FHE schemes: "Rather than having a group homomorphic decryption algorithm, the decryption is only guaranteed to run correctly for polynomially many evaluations of the group operation," and "The impact of our results on recent fully homomorphic encryption schemes poses itself as an open question." In other words, their generic attack does not work against known FHE schemes, which are indeed believed to be secure against quantum attacks. – Chris Peikert Aug 19 '15 at 21:29
• @ChrisPeikert : $\:$ (I realize the paper does say that, but figure I should mention that) I thought all candidate schemes for depth beyond [c*log(n) for a constant c determined during key generation] are "guaranteed to run correctly for" arbitrarily "many evaluations of the group operation". $\;\;\;\;$ – user991 Aug 20 '15 at 8:31
• For "bootstrapped" schemes, that's right. I haven't read this paper closely enough to see how existing FHEs fall outside their model of "group homomorphic" FHE, but according to the authors, they do somehow. – Chris Peikert Aug 20 '15 at 11:56