LWR-Based Fully Homomorphic Encryption, Revisited

Algorithm 3

Homomorphic multiplication.

Input: Two ciphertext matrices decrypting to messages , respectively.

Output: A derived ciphertext matrix decrypting to message .

 (1) Compute a matrix , such that , i.e., .

 (2) Output