Encryption technique that allows computations to be carried out on ciphertext, without requiring it to be decrypted first.