摘要 |
A first calculation unit is capable of calculating f(x) b x 1 and sets a calculation result of f(x) b x 1 to u, and a second calculation unit is capable of calculating f(x) a x 2 and sets a calculation result of f(x) a x 2 to v. A final calculation unit outputs (u b' v a' ) l/d for d=a'a+b'b when the calculation result u and the calculation result v satisfy u a =v b . Here, G and H are groups, f is a function for mapping an element x of the group H to the group G, x 1 and X 2 are random variables values of which are in the group G, a realization of the random variable X 1 is x 1 , a realization of the random variable X 2 is x 2 , and a, b, a', and b' are integers. |