BIT COMMITMENT VERIFICATION SYSTEM, BIT COMMITMENT APPARATUS, VERIFICATION APPARATUS, BIT COMMITMENT VERIFICATION METHOD, BIT COMMITMENT METHOD, VERIFICATION METHOD, BIT COMMITMENT PROGRAM, VERIFICATION PROGRAM

摘要

PROBLEM TO BE SOLVED: To provide a bit commitment method and the apparatus capable of being effectively used in other encryption protocols making opening information as an origin of G.;SOLUTION: A bit commitment verification system has a registration apparatus, a bit commitment apparatus, and a verification apparatus. The bit commitment apparatus uses generation origins of two groups, and generates a commitment key ck. C=ⁿ_i=1g^mih₁^ri is calculated from g, h₁, and r_i, and information to be committed m_i, and it is output as commitment. Opening information H=ⁿ_i=1h₂^ri is calculated. The verification apparatus determines whether an equation e(C/ⁿ_i=1g^mi, h₂)=e(h₁, H) is right, if it is right, the verification is passed, and if it is not right, the verification is not passed.;COPYRIGHT: (C)2010,JPO&INPIT