Hacker News Reader

I never understood why homomorphic encryption is too slow to be used reliably today. Does some part of the computation need more power than todays computers can offer?

View on HN

So here's an analogy that might help: Today, most RSA keys are 2048 bits. You can go up to 4096, but things start to get a little bit too slow for comfort. Double again and they get much slower.

Now imagine doing RSA with a 100k-200k bit key. That's the amount of slowdown FHE incurs.

They're not "that slow". They're too slow for big companies to use. But for a small product? Why not.

Reply on news.ycombinator.com