[bikeshaving]

Asymmetric encryption is great, but it means that all rebasing/transforming of edits has to be done client side. Having a homomorphic system would allow us to do some of this work server-side without revealing the documents themselves.

[drenvuk]

eh, I'm still not getting it. why not have a single or maybe multiple admins that all need to coordinate and decrypt before values can be decrypted for anyone else? upload their subkeys to the server for hashing the words, create shortened aliases for the hashes and then allow you to see them all. then you can do whatever you want with individual words that you want.

did you want to transform within words or something?