IP Library Granted Patent US 12,368,570
Granted Patent B2
US 12,368,570 · App. 18/316,062 · Granted Jul 22, 2025

Apparatus and method with homomorphic encryption operation

Inventors: Andrey Kim (Suwon-si, KR); Yongwoo Lee (Suwon-si, KR); Maksim Deriabin (Suwon-si, KR); Jieun Eom (Suwon-si, KR); Rakyong Choi (Suwon-si, KR)
Assignee: Samsung Electronics Co., Ltd.
H04L9/008H04L9/0618
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,368,570
App. No.
18/316,062
Granted
Jul 22, 2025
Kind
B2
Abstract

An apparatus with a homomorphic encryption operation includes: one or more processors configured to: generate a modified vector by preprocessing vector components of an operand ciphertext of a blind rotation operation based on an order of a polynomial of an output ciphertext of the blind rotation operation and a modulus of the operand ciphertext; and generate a homomorphic encryption operation result by performing the blind rotation operation based on a public key for performing the blind rotation operation and the modified vector.

Claims (46)

1. An apparatus with a homomorphic encryption operation, the apparatus comprising:

one or more processors configured to:

generate a modified vector by preprocessing vector components of an operand ciphertext of a blind rotation operation based on an order of a polynomial of an output ciphertext of the blind rotation operation and a modulus of the operand ciphertext; and

generate a homomorphic encryption operation result by performing the blind rotation operation based on a public key for performing the blind rotation operation and the modified vector.

2. The apparatus of claim 1 , wherein the public key comprises a blind rotation key, an automorphism key, and a key-switching key.

3. The apparatus of claim 1 , wherein the public key is generated based on the modified vector and a secret key.

4. The apparatus of claim 1 , wherein, for the generating of the modified vector, the one or more processors are configured to:

compare the modulus and the order of the output ciphertext; and

generate the modified vector based on a result of the comparing.

5. The apparatus of claim 1 , wherein, for the generating of the modified vector, the one or more processors are configured to:

generate a first set based on a portion of the vector components of the operand ciphertext; and

generate the modified vector based on a second set, wherein the first set and the second set are disjoint.

6. The apparatus of claim 1 , wherein, for the generating of the homomorphic encryption operation result, the one or more processors are configured to:

determine, in response to a generator of the vector components of the operand ciphertext being unique, a loop index based on the generator; and

perform the blind rotation operation based on the loop index.

7. The apparatus of claim 1 , wherein, for the generating of the homomorphic encryption operation result, the one or more processors are configured to:

perform a first blind operation based on a first set of the operand ciphertext; and

perform a second blind operation based on a second set of the operand ciphertext.

8. The apparatus of claim 1 , wherein, for the generating of the homomorphic encryption operation result, the one or more processors are configured to perform the blind rotation operation by performing an increment operation, an automorphism operation, and a key switching operation based on the modified vector.

9. The apparatus of claim 1 , wherein, for the generating of the homomorphic encryption operation result, the one or more processors are configured to:

determine a number of odd numbers and a number of even numbers in the vector components of the operand ciphertext; and

add “1” to the vector components of the operand ciphertext based on a result of comparing the number of odd numbers and the number of even numbers.

10. The apparatus of claim 1 , wherein, for the generating of the homomorphic encryption operation result, the one or more processors are configured to, in response to the vector components of the operand ciphertext being even, perform the blind rotation operation based on a blind rotation key based on vector components of a secret key of the public key, a negative sum of the vector components of the secret key, and a sum of consecutive vector components among the vector components of the secret key.

11. The apparatus of claim 1 , further comprising a receiver configured to receive the public key and the operand ciphertext.

12. A processor-implemented method with a homomorphic encryption operation, the method comprising:

generating a modified vector by preprocessing vector components of an operand ciphertext of a blind rotation operation based on an order of a polynomial of an output ciphertext of the blind rotation operation and a modulus of the operand ciphertext; and

generating a homomorphic encryption operation result by performing the blind rotation operation on the modified vector based on a public key for performing the blind rotation operation.

13. The method of claim 12 , wherein the public key comprises a blind rotation key, an automorphism key, and a key-switching key.

14. The method of claim 12 , wherein the public key is generated based on the modified vector and a secret key.

15. The method of claim 12 , wherein the generating of the modified vector comprises:

comparing the modulus and the order of the output ciphertext; and

generating the modified vector based on a result of the comparing.

16. The method of claim 12 , wherein the generating of the modified vector comprises:

generating a first set based on a portion of the vector components of the operand ciphertext; and

generating the modified vector based on a second set, wherein the first set and the second set are disjoint.

17. The method of claim 12 , wherein the generating of the homomorphic encryption operation result comprises:

determining, in response to a generator of the vector components of the operand ciphertext being unique, a loop index based on the generator; and

performing the blind rotation operation based on the loop index.

18. The method of claim 12 , wherein the generating of the homomorphic encryption operation result comprises:

performing a first blind operation based on a first set of the operand ciphertext; and

performing a second blind operation based on a second set of the operand ciphertext.

19. The method of claim 12 , wherein the generating of the homomorphic encryption operation result comprises performing the blind rotation operation by performing an increment operation, an automorphism operation, and a key switching operation based on the modified vector.

20. The method of claim 12 , wherein the generating of the homomorphic encryption operation result comprises:

determining a number of odd numbers and a number of even numbers in the vector components of the operand ciphertext; and

adding “1” to the vector components of the operand ciphertext based on a result of comparing the number of odd numbers and the number of even numbers.

21. The method of claim 12 , wherein the generating of the homomorphic encryption operation result comprises performing, in response to the vector components of the operand ciphertext being even, the blind rotation operation based on a blind rotation key based on vector components of a secret key of the public key, a negative sum of the vector components of the secret key, and a sum of consecutive vector components among the vector components of the secret key.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 11, 2023
From: KIM, ANDREY; LEE, YONGWOO; DERIABIN, MAKSIM; EOM, JIEUN; CHOI, RAKYONG
To: SAMSUNG ELECTRONICS CO., LTD.
Reel/Frame 063617/0950 →
Priority Claims (2)
KR 10-2022-0126564 · Oct 4, 2022 · national
KR 10-2022-0170614 · Dec 8, 2022 · national
Continuity (1)
Related Publication 20240129106A1 · Apr 18, 2024
References Cited (16)
US 10778409B2 · Cheon · 2020 [cited by examiner]
US 20210399874A1 · Polyakov · 2021 [cited by examiner]
US 20220376890A1 · Eom et al. · 2022 [cited by applicant]
US 20220385461A1 · Eom et al. · 2022 [cited by applicant]
US 20230171085A1 · Lee et al. · 2023 [cited by applicant]
US 20230246807A1 · Lee et al. · 2023 [cited by applicant]
US 20240259180A1 · Joye · 2024 [cited by examiner]
EP 4195577A1 · 2023 [cited by applicant]
KR 102349855B1 · 2022 [cited by applicant]
KR 1020220120410A · 2022 [cited by applicant]
Kim, Andrey, et al. “General Bootstrapping Approach for RLWE-Based Homomorphic Encryption.” IEEE Transactions on Computers, 2023, (28 pages). [cited by applicant]
Extended European search report issued on Feb. 12, 2024, in counterpart European Patent Application No. 23192922.5 (6 pages). [cited by applicant]
Ducas et al. “FHEW: Bootstrapping Homomorphic Encryption in less than a second” [cited by applicant]
Chillotti et al. “TFHE: Fast Fully Homomorphic Encryption over the Torus*” [cited by applicant]
Lee et al. “Efficient FHEW Bootstrapping with Small Evaluation Keys, and Applications to Threshold Homomorphic Encryption” [cited by applicant]
Micciancio et al. “Bootstrapping in FHEW-like Cryptosystems” [cited by applicant]