Arithmetic device, method, and program product

摘要

An arithmetic device includes an input unit inputting data that are elements of a group; a converting unit is configured, when the input data are in a second representation, to convert the input data into a first representation and to perform arithmetic operation on the converted first representation using an operand in the first representation in which at least one subcomponent is a zero element to convert the converted first representation into first converted data expressed in the first representation, and when the input data are in the first representation, to perform arithmetic operation on the input data using the operand in the first representation in which at least one subcomponent is a zero element to convert the input data into second converted data expressed in the first representation; and an operating unit that performs arithmetic processing on the first or the second converted data using secret information.

主权项

1. A cryptographic device that performs a processing on elements of a group by using secret information, wherein
the elements of the group are expressed at least in a first representation and in a second representation, in which an element expressed by the first representation is constituted by a plurality of components each including a plurality of subcomponents, and one element of the group expressed in the second representation has a plurality of corresponding first representations, and an element expressed in the first representation obtained by performing an arithmetic operation on an element expressed in the first representation by using an operand having a same group structure as a component included in the first representation that represents a same element of the group as that before the arithmetic operation, the cryptographic device comprising:
an interface configured to input input data that are elements of the group; anda processor configured to:
convert the input data into the first representation when the input data are in the second representation, and perform the arithmetic operation on the converted first representation by using the operand in the first representation in which at least one subcomponent is a zero element to convert the converted first representation into first converted data expressed in the first representation;perform the arithmetic operation on the input data by using the operand in the first representation in which at least one subcomponent is a zero element to convert the input data into second converted data expressed in the first representation when the input data are in the first representation; andperform the processing on the first converted data or the second converted data by using the secret information to produce output data,thereby to increase randomness to enhance security for the output data.