I want to implement threshold homomorphic encryption for my project. (encrypt a message using one public key, and decrypt a ciphertext using distributed secret keys)
I read a paper "Multiparty computation from threshold homomorphic encryption", which describes the way to build threshold homomorphic encryption.
However, in a case of Paillier cryptosystem, the performance was not good than I expected. (http://cs.utdallas.edu/dspl/cgi-bin/pailliertoolbox/manual.pdf)
I recently read that NTRU based cryptosystem provides homomorphism and the performance is better than others.
So I think that NTRU-based threshold homomorphic system will have better performance.
But I could not find the paper about NTRU-based threshold homomorphic encryption system.
I think it is possible to build the NTRU-based one because there are some references about NTRU-based secret sharing schemes.
Is there any paper that explains NTRU-based threshold homomorphic encryption system?
Or can anyone give me a guide to build the system?