| 摘要 |
Where G and H are cyclic groups, M is an integer of two or more, i = 1, ..., M, f is a homomorphic function of mapping a member x i of group H to group G, R i and R 0 are random variables with a value in group G, r i is a realized value of the random variable R i, , r 0 is a realized value of the random variable R 0 , and a i is a random number of an integer of 0 or more, a random number generation unit 11 generates random numbers a 1 , a 2 , ..., a M . A sampler 21 is capable of calculating f(x 1 )r 1 , f(x 2 )r 2 , ..., f(x M )r M to obtain a calculation result thereof as z 1 , z 2 , ..., z M , respectively. A power calculation unit 12 calculates (z 1 ) a1 , (z 2 ) a2 , ..., (z M ) aM . An extended randomizable sampler 22 is capable of calculating f(x 1 a1 × x 2 a2 × ... × x M aM )r 0 to obtain a calculation result z 0 thereof. A determination unit 16 determines whether or not (z 1 ) a1 × (z 2 ) 2 × ... × (z M ) aM = Z 0 . |
