English

On the Security of Fully Homomorphic Encryption and Encrypted Computing: Is Division safe?

Cryptography and Security 2014-11-19 v1 Discrete Mathematics

Abstract

Since fully homomorphic encryption and homomorphically encrypted computing preserve algebraic identities such as 2*2=2+2, a natural question is whether this extremely utilitarian feature also sets up cryptographic attacks that use the encrypted arithmetic operators to generate or identify the encryptions of known constants. In particular, software or hardware might use encrypted addition and multiplication to do encrypted division and deliver the encryption of x/x=1. That can then be used to generate 1+1=2, etc, until a complete codebook is obtained. This paper shows that there is no formula or computation using 32-bit multiplication x*y and three-input addition x+y+z that yields a known constant from unknown inputs. We characterise what operations are similarly `safe' alone or in company, and show that 32-bit division is not safe in this sense, but there are trivial modifications that make it so.

Keywords

Cite

@article{arxiv.1411.4813,
  title  = {On the Security of Fully Homomorphic Encryption and Encrypted Computing: Is Division safe?},
  author = {Peter T. Breuer and Jonathan P. Bowen},
  journal= {arXiv preprint arXiv:1411.4813},
  year   = {2014}
}

Comments

10 pages, as first submitted to short paper section of ESSoS 2015

R2 v1 2026-06-22T07:02:49.646Z