In an inverse calculation circuit, an inverse calculation method, and a
storage medium encoded with a computer readable computer program code, a
random number generator generates a first random number and a second
random number; and an inverter receives a plurality of first bits
expressing a first element of a finite field(s) as first inputs, receives
a plurality of second bits expressing a second element of a finite
field(s) as second inputs. In response to the first and second random
numbers, the inverter outputs a plurality of third bits expressing the
inverse elements of the first element. The first random number prevents a
different power analysis (DPA) decryption attack, and the second random
number prevents a timing decryption attack.