Patent ID: 8924448

Claim:
A cryptographic device that performs a processing on elements of a group by using secret information, wherein the elements of the group are expressed at least in a first representation and in a second representation, in which an element expressed by the first representation is constituted by a plurality of components each including a plurality of subcomponents, and one element of the group expressed in the second representation has a plurality of corresponding first representations, and an element expressed in the first representation obtained by performing an arithmetic operation on an element expressed in the first representation by using an operand having a same group structure as a component included in the first representation that represents a same element of the group as that before the arithmetic operation, the cryptographic device comprising: an interface configured to input input data that are elements of the group; and a processor configured to: convert the input data into the first representation when the input data are in the second representation, and perform the arithmetic operation on the converted first representation by using the operand in the first representation in which at least one subcomponent is a zero element to convert the converted first representation into first converted data expressed in the first representation; perform the arithmetic operation on the input data by using the operand in the first representation in which at least one subcomponent is a zero element to convert the input data into second converted data expressed in the first representation when the input data are in the first representation; and perform the processing on the first converted data or the second converted data by using the secret information to produce output data, thereby to increase randomness to enhance security for the output data.