The point is to not have subkeys or any other way to access any part of the plaintex - as the goal is generally to offset the computation and the costs of it to another party. And yes, most likely it will require a very particular format of the data, and in all likelihood will allow only for a limited set of operations.

▲

smalltorch 23 minutes ago | parent [-]

I wish I understood the actual data Alice needed processed to wrap my head around the problem space. Reading examples of what it could be used for leave me more confused.

Without knowing the actual pointed problem space the generalities of the schema just sounds like a snake game to me.

I can't get past where the veil is dropped for bob to take some ciphertext and operate on it in any meaningful way for him to create some machine that simultaneously can process encrypted data while being completely blinded to what the data is or the insights learned. Any form of ability to process a datum while simultaneously being blinded to it is logically incompatible to me.

Now, could we obfuscated it and lower the chances of an attacker being able to do anything useful with it or knowing what is being processed? Yes...but why muddy the definition of encryption in order to do this?

	▲	3form 3 minutes ago \| parent [-]
		One example I can think of: privacy preserving ML models. Company wants to keep their model safe and also perhaps not to force you to run some classification on your phone for battery savings. You want your inference features to be private, because they e.g. contain your location data. You send them encrypted, you get encrypted results back and decrypt them. It could have been obfuscated, but assuming we have HmE, obfuscation is more tricky to be done right. Do we change the definition of encryption meaningfully in this process, though? If so, I don't see how really. It's just that out of set of potential encryption algorithms, for this purpose we would pick ones that are fit for it. It wouldn't be AES I guess... But it would still be encryption. Maybe a weaker one, but that weakness could be coincidental. I'm not familiar with any theorems in that space.