| 摘要 |
Given that G and H are cyclic groups, M is a positive integer greater than 1, i=1,..., M, f is a homomorphic function which copies an element xi of the group H to the group G, Ri and R0 are random variables having values in the group G, ri is an instance of the random variable Ri, r0 is an instance of the random variable R0, and ai is a positive integer random number greater than zero, a random number generation unit (11) generates random numbers a1, a2, ..., aM. A sampler (21) is capable of calculating f=(x1)r1, f(x2)r2, ..., f(xM)rM, treating the results of the calculations thereof respectively as z1, z2, ..., zM. An exponent calculation unit (12) calculates (z1)a1, (z2)a2, ..., (zM)aM. An expanded randomizable sampler (22) is capable of calculating f(x1 a1 *x2 a2 * ... *xM aM)r0, treating the result of the calculation thereof as z0. An assessment unit (16) assesses whether (z1)a1*(z2)a2* ... *(zM)aM = z0. |
