News for hackers. Stuff that matters.
Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by dragonwriter on Monday April 13, 2020 @10:31AM (#22856148)
> Any control flow program can be converted into a matrix multiplication.

Any control flow program, on a set of inputs for which it terminates[0], can be, but it's not true that any control flow program, with unspecified inputs, can be, even with variables for the inputs, since the shape of the multiplication as well as the value of elements in the matrices may depend on the inputs (also, whether it's even a terminating program can obviously depend on the inputs.)

[0] and any program which always terminates can also be, though the general form may be more complex than is necessary for some inputs.

Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by heavenlyblue on Monday April 13, 2020 @11:50AM (#22856870)
No, any program can be converted into a matrix form.

Non-terminating programs are modelled as infinitely-sized matrixes, which are obviously not computable; but neither are non-terminating programs computable in the real sense.

Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by api on Monday April 13, 2020 @10:43AM (#22856255)
I guess then that my hypothetical fully homomorphic C-64 would be huge and would have a limited run-time?
Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by lazersharkman on Monday April 13, 2020 @11:17AM (#22856558)
Yes. No recursion. Essentially what could be fabbed as a circuit
Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by api on Monday April 13, 2020 @11:29AM (#22856685)
I get it. I think I had the misconception that you could branch in FHE, but as I think about it this would by its nature reveal quite a lot of information about the plaintext.

Would it perhaps be possible to create a weaker form of homomorphic encryption that could branch? It would not be strong enough for the most serious security use cases (authentication, financial, etc.) but would perhaps be usable for cases where you just want to protect data confidentiality e.g. processing PII. The processor could probably infer the structure of the running program but not necessarily its data if appropriate constant-time comparisons and other constructions were used.

Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by heavenlyblue on Monday April 13, 2020 @11:52AM (#22856886)
If you can branch then you can always run a program that compares the encrypted value to a constant, then iterate over the whole space of possible values for the constant and that way decrypt the value
Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by heavenlyblue on Monday April 13, 2020 @12:06PM (#22857013)
CPUs are a circuit. What are you on about?

Ergo, you can model anything CPUs do as a matrix.

Re:TFHE: Fast Fully Homomorphic Encryption over the Torus by dang on Monday April 13, 2020 @03:05PM (#22858952)
We've asked you before to edit the swipes out of your comments here. If you keep doing it, like here and https://news.ycombinator.com/item?id=22847040 from yesterday, we're going to have to ban you. I don't want to do that, so would you please just make your substantive points thoughtfully?

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and sticking to the rules when posting here, we'd be grateful.