A highly functional cryptographic system is realized without using the pairing operation of the composite order. The random matrix selection unit 142 randomly selects a random matrix V * from among a plurality of matrices satisfying a predetermined condition based on the plurality of pairing logarithmic coefficients ηi calculated by the encryption parameter setting device 100. The output basis calculation unit 143 calculates a plurality of output bases gk based on the plurality of basis factors D to j calculated by the encryption parameter setting device 100 and the random matrix V * selected by the random matrix selection unit 142.
展开▼