To provide a method for secret calculation of an exclusive OR enabling reduction of processing time without the knowledge of a value inputted to a function.
G is a rational point group of an elliptic curve, P is an element of G, p is the order of P, Q=xP with respect the element x of a set ä1 to p} of secret keys, and (G, p, P, Q) is a public key. A cryptographic function E of a is defined as E(a, r)=(A, B)=(rp, (r+a)Q). A controller inputs ciphertexts (A, B) and (X, Y) of a and b, and sends (A, B) and (X, Y) to an ciphertext converter. The ciphertext converter calculate(A', B') and (X', Y') which are ciphertexts of (A, B) and (X, Y), and sends (A', B') to each decoder and sends (X', Y') to the controller. Each decoder calculates x
COPYRIGHT: (C)2006,JPO&NCIPI
Koji Senda
Kotaro Suzuki
Uchiyama Shigenori
JP2006154033A | ||||
JP2006201468A | ||||
JP2007510947A |