Closed IceTDrinker closed 2 months ago
I think the doc does small -> small and big -> big
but if we keyswitch to the small key then we have a smaller keyswitching key to generate, though you will need to bootstrap in the case where the encryption key is the big one
FYI, managed to fit my distributed generated keys into tfhe-rs types and run the following test when using Small destination_key and Big encryption_key_choice (i.e. when the PBS cleans up the noise during expand).
Still not 100% clear to me what are the trade-offs of the different combinations of Small/Big for destination_key/encryption_key_choice, and I am not sure what the NIST doc (which is the reference doc. for us) says about it (I am guessing this choice has implication wrt which parameters to use)