{
  "abstract": "In FHEW/TFHE, a programmable bootstrap evaluates an arbitrary function of the encrypted message, encoded as the test polynomial of a blind rotation. We work in a prime-power cyclotomic ring whose prime is the plaintext modulus p (a design choice that leaves the ring degree free as a security parameter) and compare the Single-Value Mode (SVM), one rotation per function, with the Multi-Value Mode (MVM), one function-independent rotation shared by all. Factoring the test polynomial as v_f ^*= B_f^∗ · w, the function carried by the dual module and the rotated factor by the torus, lets a single hypothesis (a centered accumulator error of arbitrary covariance G) cover both modes: the two variances are values of one G- form, and their ratio is the exact amplification. The f -independent factorizations are then parametrized by a non-zero ring element, the cofactor, and by the integer lift of the table: at a random lift the cofactor is chosen by a shortest-vector problem for an explicit quadratic form, then the lift by a closest-vector problem of rank p − 1. In the spherical model that form is a trace norm and two designs compete: the canonical cofactor, of noise cost p(p + 1)/6, and the pivot, which reads the integer table itself at noise cost 2p, at a random lift; the optimized lift then favours the canonical cofactor on the generic tables. Under the other natural covariance, the block Laplacian, it is optimal for every p. Both cofactors are measured, in the key-noise regime, on a complete implementation, publicly available.",
  "abstract_shown": true,
  "affiliations": [],
  "article_type": null,
  "arxiv": null,
  "author_total": 3,
  "authors": [
    {
      "name": "Philippe Chartier"
    },
    {
      "name": "Michel Koskas"
    },
    {
      "name": "Mohammed Lemou"
    }
  ],
  "bibtex": "https://research.draconitic.com/paper/fxfbpz9qfg422.bib",
  "cited_by": 0,
  "doi": null,
  "fulltext_url": null,
  "id": "fxfbpz9qfg422",
  "issns": [],
  "landing_url": "https://hal.science/hal-05849114v1",
  "language": "en",
  "licence": "CC-BY-4.0",
  "licence_label": "CC BY 4.0",
  "licence_source": "article",
  "licence_url": "https://creativecommons.org/licenses/by/4.0/",
  "metadata_licence": null,
  "native_subjects": [
    [
      "hal",
      "0.math"
    ]
  ],
  "openalex": null,
  "pdf_url": "https://hal.science/hal-05849114/document",
  "pmcid": null,
  "pmid": null,
  "published": "2026-11-02",
  "publisher": null,
  "ris": "https://research.draconitic.com/paper/fxfbpz9qfg422.ris",
  "sources": [
    {
      "first_seen": "2026-11-03T12:20:18Z",
      "native_id": "hal-05849114",
      "source": "hal",
      "url": "https://hal.science/hal-05849114v1"
    }
  ],
  "subjects": [
    {
      "field": "mathematics",
      "origin": "hal:0.math",
      "subfield": "general"
    }
  ],
  "title": "Rotate Once, Read Many Times: on the Output Noise of Multi-Value Bootstrapping",
  "title_text": "Rotate Once, Read Many Times: on the Output Noise of Multi-Value Bootstrapping",
  "type": "preprint",
  "updated_at": "2026-11-04T12:20:49Z",
  "url": "https://research.draconitic.com/paper/fxfbpz9qfg422",
  "venue": "HAL",
  "versions": []
}