[amenghra]

This is very interesting from an academic/theory point of view.

There currently aren't a lot practical use cases where we can afford a performance loss of ~100,000,000x (your homomorphic crypto algorithm is going to run on the order of ~Hz on a ~Ghz CPU).

[tgtweak]

There are applications for it, despite the speed penalty.

[dsacco]

What are those applications?

[tgtweak]

Any application where you need an untrusted third party to do operations on encrypted data, without them getting access to the data itself.

[dsacco]

Right but that's nearly tautological...I meant specific applications that can tolerate the massive performance sacrifice.