A log
output device and a program are provided, which
append a signature to a log, prevent an undetectable tampering (alteration,
insertion, deletion, etc.), and are able to narrow tampered position if tampered. The log
output device forms a log
record including a data part and a hash part, and outputs to a disk; the hash part is formed by combining a hash of the data part (data hash) and a hash of the hash part of the previous
record (link hash); a signature is appended to only a part of records of a
hash chain; when outputting the
record to the disk, a copy of the hash part of the record is maintained on a
process memory; when outputting next record, the hash part of the latest record on the disk and the hash part maintained on the
process memory are compared; if they are matched, the record on the disk is determined as not being tampered, and if mismatched, the record is determined as tampered.