Encryption noise is error carried by a ciphertext. In homomorphic encryption, additions and multiplications accumulate noise until decryption crosses a threshold and fails. section 15.2.3 section 15.2.2
A ciphertext reaches its limit
After several operations, a ciphertext may still decrypt correctly but have too much noise for further operations. Bootstrapping evaluates a decryption circuit on the ciphertext to reduce the noise, though that circuit introduces some error of its own. section 15.2.3
Noise appears in two useful cryptographic roles:
- In LWE, adding a random small error makes secret recovery harder. section 14.3.2
- In homomorphic encryption, accumulated error limits circuit depth unless bootstrapping refreshes the ciphertext. section 15.2.2
