An object of the present invention is to provide an electronic data encryption and decryption system allowing a privileged user to decrypt all encrypted data without using a plurality of secret keys but only by using a single secret key that the privileged user himself has. An electronic data encryption and decryption system includes: a privileged user device, a user device, and an encrypted data generation device. The privileged user device has: a privileged user key generation means for generating a privileged user secret key x and a privileged user public key x·P (P is a generator); a first session key generation means for generating a session key K; and a first decryption means for decrypting the encrypted data by using the session key K generated by the first session key generation means. The user device has: a user key generation means for generating a user secret key r, a user public key r·P, and a public key rx·P; a second session key generation means for generating the session key K; and a second decryption means for decrypting the encrypted data by using the session key K generated by the second session key generation means. The encrypted data generation device has: a third session key generation means for generating the session key K by using the public key rx·P, session key generation information s, and a random point Q; and a means for encrypting the input electronic data by using the session key K generated by the third session key generation means.