This document specifies the following mechanisms for homomorphic encryption.
- Exponential ElGamal encryption;
- Paillier encryption.
For each mechanism, this document specifies the process for:
- generating parameters and the keys of the involved entities;
- encrypting data;
- decrypting encrypted data; and
- homomorphically operating on encrypted data.
Annex A defines the object identifiers assigned to the mechanisms specified in this document. Annex B provides numerical examples.