The verifiable anonymous channel according to the present invention, in which N encrypted input messages, where N is an integer equal to or greater than 2, are permuted and randomized to obtain N output messages and it is proved to an arbitrary verifier that said output messages and said input messages have one-to-one correspondence with each other, comprises: