Optionally, the data processing unit 73 is configured to: divide random number r on a basis of j bits, to obtain i/j numerical segments ru, where u∈[0, (i/j)?1]; query a pre-generated value list, where the value list includes a value of (hN mod N2) raised to the power of (2ju·v), and v∈[0, 2j?1]; and generate [(hN mod N2)r mod N2] through combination based on an identified value of (hN mod N2) raised to the power of ru, to generate homomorphic ciphertext c.
Optionally, n=2048, and 224≤i<n.
Optionally, the apparatus further includes the following: a ciphertext sending unit 75, configured to send homomorphic ciphertext c0 to cs respectively corresponding to data m0 to ms to a specified user, so that the specified user performs predetermined operation f( ) that satisfies additive homomorphism on homomorphic ciphertext c0 to cs, where operation result f(c0?cs) returned by the specified user can be decrypted by using private key sk, and a value obtained after the decryption is f(m0?ms).