INFORMATION PROCESSING APPARATUS, SIGNATURE PROVIDING METHOD, SIGNATURE VERIFYING METHOD, PROGRAM, AND RECORDING MEDIUM

摘要

An information processing apparatus including a message generating unit that generates N sets of messages based on a multi-order multivariate polynomial set F=(f1, . . . fm) defined on a ring K and a vector s that is an element of a set Kn, a first information selecting unit that inputs a document M and the N sets of messages to a one-way function that selects one piece of first information from among k (where k≧3) pieces of first information in response to a set of input information, and selects N pieces of first information, a second information generating unit that generate N pieces of second information, and a signature providing unit that provides a verifier with the N pieces of first information and the N pieces of second information as a digital signature.

主权项

1. An information processing apparatus comprising:
a message generating unit that generates N sets of messages based on a multi-order multivariate polynomial set F=(f1, . . . , fm) defined on a ring K and a vector s that is an element of a set Kn; a first information selecting unit that inputs a data M and the N sets of messages to a one-way function that selects one piece of first information from among k (where k≧3) pieces of first information in response to a set of input information, and selects N pieces of first information; a second information generating unit that generate N pieces of second information corresponding to the respective N pieces of first information; and a signature providing unit that provides a verifier holding the multi-order multivariate polynomial set F and a vector y=(y1, . . . , ym)=(f1(s), . . . , fm(s)) with the N pieces of first information and the N pieces of second information as a digital signature, wherein the vector s is a signature key, wherein the multi-order multivariate polynomial set F is a public key or a system parameter, wherein the vector y is a public key, and wherein the messages are information obtained by performing a certain operation according to the one piece of first information that corresponds to the second information and is selected from among the k pieces of first information, using the public keys and the second information.