For the LTV-FHE scheme, after how many additions should modulus switching be used?

Question

From the LTV-FHE paper I find out that after every multiplication there must be a modulus switch to mitigate the noise in the resulting ciphertext, besides relinearization.

But, assuming the ciphertexts to be summed are the result of many operations and we have consumed many levels of the moduli ladder, that means that the room for noise is smaller. ( The assumption that the room for noise is getting smaller may be wrong, I haven't found any proof yet, is my personal observation.)

So, if we evaluate homomorphically many additions of ciphertexts like those aforementioned, should we use modulus switching to cut the noise before wrap around ?

Answer 1

First of all, I want to clarify that there is no relinearization involved in ciphertext multiplication.

Second, as discussed in the BGV paper, its not the ratio of noise to modulus size that matters but the absolute magnitude of noise is important and we should bring down the noise magnitude after each multiplication.

And finally comparing homomorphic addition to multiplication, the noise growth in multiplication is exponential whereas the noise growth in addition is atmost a single bit. Therefore we can perform multiple additions but not multiplications. Theoretically, you can compute a bound for maximum number of additions or multiplication before the noise wraps around the modulus, rendering the decryption unsuccessful.

I hope this helps you.