The Paillier scheme is partially homomorphic. By multiplying two ciphertexts, what type of operation do you obtain on the corresponding plaintext messages? Answer in one word.
