All Questions
1 question
0
votes
1
answer
99
views
Is the "decapsulate" function from lattice based cryptography homomorphic?
Observing the code example from pqcrypto-kyber, is the decapsulate function $d$ homomorphic?
If $d(ct, sk_i) = ss_i$, is it true that $d(ct, \sum_i sk_i) = \sum_i ss_i$ ?
- 418