首页/论文/2008.08398

arXiv 2008.083982020-08cs.ITmath.COmath.ITmath.NT

On CCZ-equivalence of the inverse function

Lukas Kölsch

备注：: Includes reviewers' comments, in particular an improved introduction, and corrected some typos. Accepted for publication in IEEE Transactions on Information Theory

英文摘要：

The inverse function $x \mapsto x^{-1}$ on $\mathbb{F}_{2^n}$ is one of the most studied functions in cryptography due to its widespread use as an S-box in block ciphers like AES. In this paper, we show that, if $n\geq 5$, every function that is CCZ-equivalent to the inverse function is already EA-equivalent to it. This confirms a conjecture by Budaghyan, Calderini and Villa. We also prove that every permutation that is CCZ-equivalent to the inverse function is already affine equivalent to it. The majority of the paper is devoted to proving that there are no permutation polynomials of the form $L_1(x^{-1})+L_2(x)$ over $\mathbb{F}_{2^n}$ if $n\geq 5$, where $L_1,L_2$ are nonzero linear functions. In the proof, we combine Kloosterman sums, quadratic forms and tools from additive combinatorics.

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

阅读原文

阅读 PDF ↗

arXiv 页面 ↗HTML 原文 ↗

本文内容

英文摘要相关论文

机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。

继续探索

相关论文

cc-differential uniformity, (almost) perfect cc-nonlinearity, and equivalences

In this article, we introduce new notions $cc$-differential uniformity, $cc$-differential spectrum, PccN functions and APccN functions, and investigate their properties. We also introduce $c$-CCZ equivalence, $c$-EA equivalence, and $c1$-equivalence. We show that $c$-differential uniformity is invariant under $c1$-equivalence, and $cc$-differential uniformity and $cc$-differential spectrum are preserved under $c$-CCZ equivalence. We characterize $cc$-differential uniformity of vectorial Boolean functions in terms of the Walsh transformation. We investigate $cc$-differential uniformity of power…

2023-01-23cs.CRcs.ITmath.IT

Linearly Self-Equivalent APN Permutations in Small Dimension

All almost perfect nonlinear (APN) permutations that we know to date admit a special kind of linear self-equivalence, i.e., there exists a permutation $G$ in their CCZ-equivalence class and two linear permutations $A$ and $B$, such that $G \circ A = B \circ G$. After providing a survey on the known APN functions with a focus on the existence of self-equivalences, we search for APN permutations in dimension 6, 7, and 8 that admit such a linear self-equivalence. In dimension six, we were able to conduct an exhaustive search and obtain that there is only one such APN permutation up to CCZ-equival…

2021-04-06cs.ITmath.COmath.IT

通过自等价子空间中的Gröbner基搜索发现8维二次APN函数

Quadratic APN Functions in Dimension 8 via Gröbner Basis Search in a Self-Equivalence Subspace

eCampus University（欧洲开放大学）

本文在8维自等价子空间中通过Gröbner基搜索发现566个二次APN函数，其中4个新CCZ等价类（500个函数）未被现有数据库收录，并验证了搜索管道的正确性。

2026-06-23cs.CRcs.ITmath.CO

The $c$-differential behavior of the inverse function under the $EA$-equivalence

While the classical differential uniformity ($c=1$) is invariant under the CCZ-equivalence, the newly defined \cite{EFRST20} concept of $c$-differential uniformity, in general is not invariant under EA or CCZ-equivalence, as was observed in \cite{SPRS20}. In this paper, we find an intriguing behavior of the inverse function, namely, that adding some appropriate linearized monomials increases the $c$-differential uniformity significantly, for some~$c$. For example, adding the linearized monomial $x^{p^d}$, where $d$ is the largest nontrivial divisor of $n$, increases the mentioned $c$-different…

2020-08-06cs.ITmath.IT

New Instances of Quadratic APN Functions

In a recent work, Beierle, Brinkmann and Leander presented a recursive tree search for finding APN permutations with linear self-equivalences in small dimensions. In this paper, we describe how this search can be adapted to find many new instances of quadratic APN functions. In particular, we found 12,921 new quadratic APN functions in dimension eight, 35 new quadratic APN functions in dimension nine and five new quadratic APN functions in dimension ten up to CCZ-equivalence. Remarkably, two of the 35 new APN functions in dimension nine are APN permutations. Among the 8-bit APN functions, ther…

2021-10-14cs.ITmath.COmath.IT

关于在 $\mathbb F_{p^n}$ 上与二次函数 CCZ 等价但非 EA 等价的函数

On the Functions Which are CCZ-equivalent but not EA-equivalent to Quadratic Functions over $\mathbb F_{p^n}$

本文研究有限域上与给定函数 CCZ 等价但 EA 不等价的函数存在性问题，利用具有线性结构的分量函数构造此类函数，并对满足特定非线性度和差分均匀度条件的二次函数给出显式构造。

2023-08-10cs.ITmath.IT

更多相关论文收起更多论文

On subspaces of Kloosterman zeros and permutations of the form $L_1(x^{-1})+L_2(x)$

Permutations of the form $F=L_1(x^{-1})+L_2(x)$ with linear functions $L_1,L_2$ are closely related to several interesting questions regarding CCZ-equivalence and EA-equivalence of the inverse function. In this paper, we show that $F$ cannot be a permutation if the kernel of $L_1$ or $L_2$ is too large. A key step of the proof is a new result on the maximal size of a subspace of $\mathbb{F}_{2^n}$ that contains only Kloosterman zeros, i.e. a subspace $V$ such that $K_n(v)=0$ for all $v \in V$ where $K_n(v)$ denotes the Kloosterman sum of $v$.}

2020-09-22cs.ITmath.COmath.IT

Characters, Weil sums and $c$-differential uniformity with an application to the perturbed Gold function

Building upon the observation that the newly defined~\cite{EFRST20} concept of $c$-differential uniformity is not invariant under EA or CCZ-equivalence~\cite{SPRS20}, we showed in~\cite{SG20} that adding some appropriate linearized monomials increases the $c$-differential uniformity of the inverse function, significantly, for some~$c$. We continue that investigation here. First, by analyzing the involved equations, we find bounds for the uniformity of the Gold function perturbed by a single monomial, exhibiting the discrepancy we previously observed on the inverse function. Secondly, to treat …

2020-09-16cs.ITmath.COmath.IT

二元约束三元类中无限族的APN置换

Infinite families of APN permutations in constrained trivariate classes over $\mathbb{F}_{2^m}$

University of Perugia（佩鲁贾大学）；Naval Postgraduate School（海军研究生院）

本文研究了二元约束三元类中无限族的APN置换，通过允许标量参数在F_{2^m}^*中变化，扩展了Li-Kaleyski的两个APN置换族，并证明了G_a和H_a的根条件及强不等价性。

2026-03-16cs.CRcs.ITmath.IT

关于Dillon的APN六项式分类

On the Classification of Dillon's APN Hexanomials

University of Perugia（佩鲁贾大学）；Naval Postgraduate School（海军研究生院）

本文研究了Dillon六项式在有限域上的分类，通过代数方法推导APN条件并排除大量六项式，发现其代数障碍限制了差分均匀性，并通过计算验证了APN六项式的CCZ等价性。

2026-02-21cs.ITmath.AGmath.IT

On the Differential Linear Connectivity Table of Vectorial Boolean Functions

Vectorial Boolean functions are crucial building blocks in symmetric ciphers. Different known attacks on block ciphers have resulted in diverse cryptographic criteria of vectorial Boolean functions,such as differential distribution table and nonlinearity. Very recently, Bar-On et al. introduced at Eurocrypt'19 a new tool, called the Differential-Linear Connectivity Table (DLCT).This paper is a follow-up work, which presents further theoretical characterization of the DLCT of vectorial Boolean functions and also investigates this new criterion of functions with certain forms. In this paper we i…

2019-07-13cs.ITmath.IT

A Further Study of Quadratic APN Permutations in Dimension Nine

Recently, Beierle and Leander found two new sporadic quadratic APN permutations in dimension 9. Up to EA-equivalence, we present a single trivariate representation of those two permutations as $C_u \colon (\mathbb{F}_{2^m})^3 \rightarrow (\mathbb{F}_{2^m})^3, (x,y,z) \mapsto (x^3+uy^2z, y^3+uxz^2,z^3+ux^2y)$, where $m=3$ and $u \in \mathbb{F}_{2^3}\setminus\{0,1\}$ such that the two permutations correspond to different choices of $u$. We then analyze the differential uniformity and the nonlinearity of $C_u$ in a more general case. In particular, for $m \geq 3$ being a multiple of 3 and $u \in …

2022-04-25cs.ITmath.IT

代码等价、点集等价与多项式同构

Code Equivalence, Point Set Equivalence, and Polynomial Isomorphism

Universität Passau（帕绍大学）

该研究证明线性代码等价与点集等价等价，并通过多项式同构问题解决代码等价问题。

2026-10-20cs.ITmath.ACmath.AG