Two public keys including a random number term therein are prepared in a database for each divided plaintext in advance, a plaintext is divided into a plurality of 1-bit divided plaintexts, one public key is selected for each divided plaintext from the database according to the bit data of each divided plaintext, and the selected public keys are added to generate a ciphertext. This invention bases its security on free selection of a desired combination of public keys.