An initialization unit (12) generates secret values of vectors p→0 and r→0 and a value ρ0. A first computation unit (13) generates a secret value of a D-fold value of a vector a→i-1.A second computation unit (14) generates a secret value of a D-fold value of a value γi-1. A third computation unit (15) generates a secret value of a value αi-1. A fourth computation unit (16) generates a secret value of a D-fold value of a vector d→i. A fifth computation unit (17) generates a secret value of a vector x→i. A sixth computation unit (18) generates a secret value of a vector r→i. A seventh computation unit (19) generates a secret value of a D-fold value of a value ρi. An eighth computation unit (20) generates a secret value of a value βi. A ninth computation unit (21) generates a secret value of a vector p→i.
展开▼