摘要 |
PROBLEM TO BE SOLVED: To provide a scalar multiplication device having tamper resistance against side channel attacks with a comparatively simple constitution.SOLUTION: A computation table storage section 2 stores a computation table TB having a plurality of computation parameters corresponding to combinations of bit information of divided scalar values k1 to kn. A scalar multiple computation section 3 receives input coordinate points P and a KB-bit scalar value k, and performs scalar multiplication processing for obtaining a scalar multiplication value k×P by using the divided scalar values k1-kn obtained by equally dividing the scalar value k by n along a bit string. Here, the scalar multiple computation section 3 simultaneously executes scalar multiplication processing for the divided scalar values k1 to kn in bit units by referring to the computation table TB stored in the computation table storage section 2. |