A sophisticated cryptographic system is realized without using a pairing operation on a composite order. A random matrix selection unit 142 randomly selects a random matrix V * from a plurality of matrices satisfying a predetermined condition, based on a plurality of pairing log coefficients · i calculated by an encryption parameter setting apparatus 100. An output base calculation unit 143 calculates a plurality of output bases g k , based on a plurality of base divisors D ˆ¼ j calculated by the encryption parameter setting apparatus 100 and the random matrix V * selected by the random matrix selection unit 142.
展开▼