First, a set of seed images that tally with each other are prepared (S101). Next, a set of threshold matrices are created from the set of seed images (S102). Next, a plurality of tally images are created from an input gray-scale image by using the set of threshold matrices (S103). The tally images are combined, whereby the confidential image is decoded.