| 摘要 |
A first calculation unit is capable of calculating f(x)bx1, and a calculation result thereof is set as u. A second calculation unit is capable of calculating f(x)ax2, and a calculation result thereof is set as v. In cases when the calculation results u and v satisfy ua = vb, a final calculation unit outputs (ub'va')1/d wherein d = a'a + b'b. However, the following conditions apply: G and H are groups; f is a function which copies element x of group H to group G; X1 and X2 are random variables having values in group G; x1 is an instance of random variable X1; x2 is an instance of random variable X2; and a, b, a', and b' are integers. |
