This document specifies the following mechanisms for homomorphic encryption.

• —

  Exponential ElGamal encryption;

• —

  Paillier encryption.

For each mechanism, this document specifies the process for:

• —

  generating parameters and the keys of the involved entities;

• —

  encrypting data;

• —

  decrypting encrypted data; and

• —

  homomorphically operating on encrypted data.

Annex A defines the object identifiers assigned to the mechanisms specified in this document. Annex B provides numerical examples.