This document specifies the following mechanisms for homomorphic encryption.
-- Exponential ElGamal encryption;
-- Paillier encryption.
For each mechanism, this document specifies the process for:
-- generating parameters and the keys of the involved entities;
-- encrypting data;
-- decrypting encrypted data; and
-- homomorphically operating on encrypted data.
Annex A defines the object identifiers assigned to the mechanisms specified in this document. Annex B provides numerical examples.