So here&#x27;s an analogy that might help: Today, most RSA keys are 2048 bits. You can go up to 4096, but things start to get a little bit too slow for comfort. Double again and they get much slower.<p>Now imagine doing RSA with a 100k-200k bit key. That&#x27;s the amount of slowdown FHE incurs.