摘要 |
A digital signature generation apparatus includes memory to store finite field F<SUB>q </SUB>and section D(u<SUB>x</SUB>(s, t), u<SUB>y</SUB>(s, t), s, t) as secret key, section being one of surfaces of three-dimensional manifold A(x, y, s, t) which is expressed by x-coordinate, y-coordinate, parameter s, and parameter t and is defined on finite field Fq, x-coordinate and y-coordinate of section being expressed by functions of parameter s and parameter t, calculates hash value of message m, generates hash value polynomial by embedding hash value in 1-variable polynomial h(t) defined on finite field F<SUB>q</SUB>, and generates digital signature D<SUB>s</SUB>(U<SUB>x</SUB>(t), U<SUB>y</SUB>(t), t) which is curve on section, the x-coordinate and y-coordinate of curve being expressed by functions of parameter t, by substituting hash value polynomial in parameter s of section.
|