Table 2 The theoretical sizes of ciphertext modulus and a ciphertext

Log₂ q

$\left(\mathsf{\text{M}}\cdot \frac{{\mathsf{\text{log}}}_2\left(h\cdot n\cdot t^4\right)}{36}+3\right)\cdot \left(11+\frac{1}{2}{\mathsf{\text{log}}}_{2}n\right)$

2M · log₂ nt

|ct|

$2n\left(\mathsf{\text{M}}\cdot \frac{{\mathsf{\text{log}}}_2\left(h\cdot n\cdot t^4\right)}{36}+3\right)\cdot \left(11+\frac{1}{2}{\mathsf{\text{log}}}_{2}n\right)$

2nM · log₂ nt