Patent ID: 9300475
Filing Date: 2016-03-29
CPC Classification: H04L

Claim Text:
1. A signature generation apparatus which generates an electronic signature obtainable by calculating a remainder modulo public information n for a result of computation C which includes multiplication of public information e and private information d, the signature generation apparatus comprising: an input logic configured to input the public information e and n; a read logic configured to read the private information d from a memory device which beforehand stores the private information d; a first calculation logic configured to perform, using a hardware processing device, multiplication M1 of new private information r and the public information n inputted by the input logic; a second calculation logic configured to perform, using the hardware processing device, addition M2 of a result of the multiplication M1 performed by the first calculation logic and the public information e inputted by the input logic; a signature generation logic configured to generate the electronic signature by performing as the computation C, using the hardware processing device, computation C′ which includes multiplication of a result of the addition M2 performed by the second calculation logic and the private information d read by the read logic, and calculating, using the hardware processing device, a remainder modulo the public information n inputted by the input logic for a result of the computation C′; and a random number generation logic configured to generate, using the processing device, a random number k, wherein the electronic signature is an ECDSA (Elliptic Curve Digital Signature Algorithm) signature, the input logic calculates a scalar product P of the random number k generated by the random number generation logic and a generator G on an elliptic curve, and inputs an x coordinate value of the scalar product P as the public information e, and the signature generation logic performs multiplication M3 of the result of the addition M2 performed by the second calculation logic and the private information d read by the read logic, performs addition M4 of a result of the multiplication M3 and a hash value h(M) of a message M to which the electronic signature is to be attached, performs multiplication M5 of a result of the addition M4 and an inverse number k