Importance

Loading Importance Indicators...

Abstract

Falsification is detected during secret computation that uses a plurality of types of secret sharing. A secret computation apparatus 1 uses shared values [a₀], . . . , [a_M-1] as inputs, and a function value [F([a₀], . . . , [a_M-1])] obtained with a function F for performing secret computation that uses J types of secret sharing as an output, and detects falsification during secret computation. A random number generating section 12 obtains shared values [r₀], . . . , [r_J-1]. A randomizing section 13 multiplies the shared value [a_m] by the shared value [r_j] to calculate a shared value [a_mr_j], and generates a randomized shared value m>:=<[a_m], [a_mr_j]>. A secret computation section 14 obtains the function value [F([a₀], . . . , [a_M-1])] while including, in a checksum C_j, randomized shared values that are computation objects and randomized shared values that are computation results. A synchronizing section 15 keeps idling until all of secret computation that uses secret sharing are completed. A validating section 16 verifies that the shared value [φ_j] obtained by multiplying the sum of shared values [f₀], . . . , [f_μj-1] included in the checksum C_j by the shared value [r_j] is equal to the shared value [ψ_j] obtained by adding shared values [f₀r_j], . . . , [f_μj-1r_j] included in the checksum C_j.

Loading the Abstract Image...

First Claim