Abstract: Some embodiments are directed to a computer-implemented method of determining encrypted computation parameters for carrying out an encrypted computation on noisy ciphertexts. A computation graph is divided into multiple subgraphs, defined by a type and by instantiation parameters for the type. Respective sets of encrypted computation parameters are defined for the respective types. An optimization of the encrypted computation parameters is performed to minimize a computational cost of carrying out the encrypted computation according to the encrypted computation parameters. The encrypted computation parameters are constrained to satisfy a noise constraint on ciphertext noise while carrying out the encrypted computation. The noise constraint is based on respective noise constraints for respective subgraphs, defined by a noise constraint function for the type that takes at least the encrypted computation parameters for the type and the instantiation parameters of the subgraph as input.

Abstract: Some embodiments are directed to a computer-implemented method of determining encrypted computation parameters for carrying out an encrypted computation on noisy ciphertexts. A computation graph is divided into multiple subgraphs, defined by a type and by instantiation parameters for the type. Respective sets of encrypted computation parameters are defined for the respective types. An optimization of the encrypted computation parameters is performed to minimize a computational cost of carrying out the encrypted computation according to the encrypted computation parameters. The encrypted computation parameters are constrained to satisfy a noise constraint on ciphertext noise while carrying out the encrypted computation. The noise constraint is based on respective noise constraints for respective subgraphs, defined by a noise constraint function for the type that takes at least the encrypted computation parameters for the type and the instantiation parameters of the subgraph as input.