Abstract: e and n are public information and d is private information. An electronic signature is generated based on a calculated value of e×d mod n. A signature generation apparatus includes a random number generation unit, a first calculation unit, a second calculation unit, and a signature generation unit. The random number generation unit generates a random number r. The first calculation unit calculates s1=r×n. The second calculation unit calculates s2=s1+e. The signature generation unit calculates s3=s2×d mod n and outputs s3 as the calculated value of e×d mod n. The signature generation apparatus can thereby generate the above electronic signature securely against differential power attacks.

Abstract: A scalar multiplication unit references a t-bit sequence representing a random number k one bit at a time from the most significant bit, and upon each referencing, sets in a work variable R[0] a value obtained by doubling a specific point G on an elliptic curve set in a scalar multiplication variable R, and sets in a work variable R[1] a value obtained by adding the specific point G to the work variable R[0]. The scalar multiplication unit 122 sets the work variable R[0] in the scalar multiplication variable R if the value of the referenced bit is 0, and sets the work variable R[1] in the scalar multiplication variable R if the value of the referenced bit is 1. A scalar multiple point output unit 123 outputs as a scalar multiple point kG a value obtained by subtracting a constant value 2tG from the scalar multiplication variable R.

Abstract: The object is to constitute a hash function by removing a feed-forward arithmetic operation. A hash value calculation device, for each integer i of i=1, . . . , L in an ascending order, calculates a function f[i] which, upon input of a value M[i] having k-n bits, an n-bit value y1[i-1] (a value y1[0] is a predetermined value IV1), and an n-bit value y2[i-1] (a value y2[0] is a predetermined value IV2), outputs an n-bit value x1[i], an n-bit value x2[i], a k-bit value k1[i], and a k-bit value k2[i]; for the value x1[i] as a plaintext and the value k1[i] as a key, calculates an n-bit value y1[i] with an encryption function of a block cipher; and for the value x2[i] as a plaintext and the value k2[i] as a key, calculates an n-bit value y2[i] with the encryption function for the block cipher. The hash value calculation device, upon input of a value y1[L] and a value y2[L] which are calculated, calculates a hash value with an injective function g.

Abstract: The disclosure herein aims to provide an image stabilizer device that generates a more appropriate shake signal. The image stabilizer device for a camera system in the present disclosure includes a detection unit that detects an angular speed of the camera system, and outputs a shake signal associated with the detected angular speed, an acquiring unit that acquires information indicating a set shutter speed, an adjusting unit that advances a phase of the shake signal to generate an adjusted signal, and outputs the adjusted signal, when the set shutter speed is faster than a predetermined speed, and a correction unit that corrects an influence on an output of the image stabilizer device due to the shake associated with the angular speed, based on the shake signal or the adjusted signal.

Abstract: A scalar multiplication unit references a t-bit sequence representing a random number k one bit at a time from the most significant bit, and upon each referencing, sets in a work variable R[0] a value obtained by doubling a specific point G on an elliptic curve set in a scalar multiplication variable R, and sets in a work variable R[1] a value obtained by adding the specific point G to the work variable R[0]. The scalar multiplication unit 122 sets the work variable R[0] in the scalar multiplication variable R if the value of the referenced bit is 0, and sets the work variable R[1] in the scalar multiplication variable R if the value of the referenced bit is 1. A scalar multiple point output unit 123 outputs as a scalar multiple point kG a value obtained by subtracting a constant value 2tG from the scalar multiplication variable R.

Abstract: e and n are public information and d is private information. An electronic signature is generated based on a calculated value of e×d mod n. A signature generation apparatus 100 includes a random number generation unit 103, a first calculation unit 111, a second calculation unit 112, and a signature generation unit 121. The random number generation unit 103 generates a random number r. The first calculation unit 111 calculates s1=r×n. The second calculation unit 112 calculates s2=s1+e. The signature generation unit 121 calculates s3=s2×d mod n and outputs s3 as the calculated value of e×d mod n. The signature generation apparatus 100 can thereby generate the above electronic signature securely against differential power attacks.

Abstract: In the prediction of side-chain conformation of protein, conformations are predicted by describing a candidate conformation in the form of an array whose components are the torsion angles of a side chain, subjecting a plurality of solution candidates to evaluation, increasing side chains in a stepwise manner, judging the appropriateness of a solution candidate based upon degree of its van der Waals contact, and generating a new solution candidate by changing torsion angle to an arbitrary value or by interchanging the components of the torsion-angle arrays of two solution candidates. Further, the foregoing processing is executed with respect to the main-chain conformation whenever a side-chain conformation corresponding to one amino acid residue is constructed, and construction of all side-chain conformations is performed in incremental fashion.