Dungeon Master's tables of FHE things
BFV
When using a plain modulus large enough for batching, generating relin keys fails at N=1024,2048.
Noise budget impact at minimum plain modulus to support batching of a single operation
| n |
Add |
Mul+relin |
| 1024 |
N/A |
N/A |
| 2048 |
N/A |
N/A |
| 4096 |
~0 |
~26 |
| 8192 |
~0 |
~28 |
| 16384 |
~0 |
~29 |
| 32768 |
~0 |
~30 |
Noise budget at minimum plain modulus to support batching
| n |
1024 |
2048 |
4096 |
8192 |
16384 |
32768 |
| bits |
N/A |
N/A |
49 |
149 |
365 |
800 |
Key sizes
- Precise sizes may vary with RNG.
- Some keys fail to generate for some poly degrees (marked as N/A).
- Coefficient modulus is default for 128-bit security.
- Plain modulus = 1,000,000. (Should have no effect)
| Poly degree |
1024 |
2048 |
4096 |
8192 |
16384 |
32768 |
| secret key |
4.17 kiB |
15.15 kiB |
68.60 kiB |
264.46 kiB |
1,004.55 kiB |
3.77 MiB |
| public key |
8.41 kiB |
30.19 kiB |
130.92 kiB |
529.19 kiB |
1.96 MiB |
7.53 MiB |
| compact public key |
4.27 kiB |
15.22 kiB |
68.69 kiB |
264.50 kiB |
1,004.58 kiB |
3.77 MiB |
| relin keys |
N/A |
N/A |
270.42 kiB |
2.07 MiB |
15.69 MiB |
113.02 MiB |
| compact relin keys |
N/A |
N/A |
131.21 kiB |
1.03 MiB |
7.85 MiB |
56.51 MiB |
| Galois keys |
N/A |
N/A |
5.79 MiB |
49.65 MiB |
408.23 MiB |
3.09 GiB |
| compact Galois keys |
N/A |
N/A |
N/A |
N/A |
N/A |
N/A |
Ciphertext sizes
- Precise sizes may vary with RNG.
- Coefficient modulus is default for 128-bit security.
- Plain modulus = 1,000,000. (Should have no effect)
| Poly degree |
1024 |
2048 |
4096 |
8192 |
16384 |
32768 |
| secret key |
8.42 kiB |
30.19 kiB |
86.45 kiB |
422.24 kiB |
1.74 MiB |
7.06 MiB |
