Encryption that allows limited computation on ciphertexts; fully homomorphic variants support arbitrary circuits.