APN functions obtained via polynomial expansion in small dimensions: Difference between revisions
No edit summary |
No edit summary |
||
Line 1: | Line 1: | ||
The following tables list APN functions obtained via polynomial expansion over GF(2^n) with n = 8,9. The functions are partitioned into classes according to the differential spectra of their orthoderivatives, and a single representatives is given from each class. In all cases, <math>\alpha</math> is a primitive element of the corresponding finite field. The label in the "Equivalent to" column indicates which known APN instance the given one is equivalent to (in the sense of having the same differential spectrum of the orthoderivative). Labels "SW" refer to Edel & Pott's switching classes; "B" refers to Beierle & Leander's quadratic APN functions; "Y" refers to the quadratic APN matrix method of Yuyin Yu; and "I" refers to the generalized isotopic shifts of Budaghyan et al. The numbers in all cases refer to the functions listed in the corresponding works in order of appearance; e.g. "I 11" refers to the eleventh function for n = 9 listed in the isotopic shift paper. | |||
Note that function 8.7 has a differential spectrum of the orthoderivative distinct from that of all known APN functions, and is therefore completely new. | |||
More details can be found in the thesis "Experimental construction of optimal cryptographic functions by expansion" by Maren Hestad Aleksandersen. | |||
<table> | <table> | ||
<tr> | <tr> | ||
Line 102: | Line 108: | ||
</tr> | </tr> | ||
</table> | </table> | ||
<br /> | |||
<table> | <table> |
Revision as of 17:48, 1 September 2021
The following tables list APN functions obtained via polynomial expansion over GF(2^n) with n = 8,9. The functions are partitioned into classes according to the differential spectra of their orthoderivatives, and a single representatives is given from each class. In all cases, [math]\displaystyle{ \alpha }[/math] is a primitive element of the corresponding finite field. The label in the "Equivalent to" column indicates which known APN instance the given one is equivalent to (in the sense of having the same differential spectrum of the orthoderivative). Labels "SW" refer to Edel & Pott's switching classes; "B" refers to Beierle & Leander's quadratic APN functions; "Y" refers to the quadratic APN matrix method of Yuyin Yu; and "I" refers to the generalized isotopic shifts of Budaghyan et al. The numbers in all cases refer to the functions listed in the corresponding works in order of appearance; e.g. "I 11" refers to the eleventh function for n = 9 listed in the isotopic shift paper.
Note that function 8.7 has a differential spectrum of the orthoderivative distinct from that of all known APN functions, and is therefore completely new.
More details can be found in the thesis "Experimental construction of optimal cryptographic functions by expansion" by Maren Hestad Aleksandersen.
ID | Representative | Equivalent to | Orthoderivative diff. spec. |
---|---|---|---|
8.1 | [math]\displaystyle{ \alpha^{170}x^{192} + \alpha^{85}x^{132} + x^6 + x^3 }[/math] | SW 19 | [math]\displaystyle{ 0^{37872}, 2^{22788}, 4^{4068}, 6^{492}, 8^{60} }[/math] |
8.2 | [math]\displaystyle{ x^{66} + \alpha^{85}x^{33} + x^{18} + x^9 + x^3 }[/math] | SW 11 | [math]\displaystyle{ 0^{38040}, 2^{22461}, 4^{4218}, 6^{513}, 8^{36}, 10^{12} }[/math] |
8.3 | [math]\displaystyle{ x^{66} + \alpha^{85}x^{33} + \alpha^{17}x^9 + \alpha^{102}x^6 + x^3 }[/math] | SW 13 | [math]\displaystyle{ 0^{38076}, 2^{22311}, 4^{4374}, 6^{495}, 8^{24} }[/math] |
8.4 | [math]\displaystyle{ \alpha^{85}x^{132} + \alpha^{85}x^{72} + x^9 + x^6 + x^3 }[/math] | SW 12 | [math]\displaystyle{ 0^{38160}, 2^{22104}, 4^{4536}, 6^{456}, 8^{24} }[/math] |
8.5 | [math]\displaystyle{ x^{66} + x^{12} + \alpha^{85}x^6 + x^3 }[/math] | SW 6 | [math]\displaystyle{ 0^{38160}, 2^{22164}, 4^{4428}, 6^{492}, 8^{36} }[/math] |
8.6 | [math]\displaystyle{ x^{129} + \alpha^{85}x^{24} + x^{12} + x^9 + x^3 }[/math] | SW 8 | [math]\displaystyle{ 0^{38184}, 2^{22179}, 4^{4338}, 6^{531}, 8^{48} }[/math] |
8.7 | [math]\displaystyle{ \alpha^{170}x^{132} + \alpha^{85}x^{66} + \alpha^{85}x^{18} + x^3 }[/math] | new | [math]\displaystyle{ 0^{38196}, 2^{22008}, 4^{4608}, 6^{456}, 8^{12} }[/math] |
8.8 | [math]\displaystyle{ \alpha^{85}x^{132} + \alpha^{85}x^{72} + x^{36} + x^{24} + x^3 }[/math] | SW 9 | [math]\displaystyle{ 0^{38256}, 2^{22116}, 4^{4230}, 6^{648}, 8^{30} }[/math] |
8.9 | [math]\displaystyle{ \alpha^{85}x^{192} + x^{72} + x^{33} + x^{24} + x^9 + \alpha^{153}x^6 }[/math] | SW 17 | [math]\displaystyle{ 0^{38388}, 2^{21723}, 4^{4626}, 6^{507}, 8^{36} }[/math] |
8.10 | [math]\displaystyle{ \alpha^{221}x^{96} + \alpha^{221}x^{33} + x^{12} + x^9 + x^6 + \alpha^{187}*x^3 }[/math] | SW 10 | [math]\displaystyle{ 0^{38439}, 2^{21618}, 4^{4671}, 6^{528}, 8^{24} }[/math] |
8.11 | [math]\displaystyle{ \alpha^{238}x^{144} + x^{132} + \alpha^{51}x^{96} + \alpha^{119}x^{48} + x^{33} + x^9 }[/math] | SW 16 | [math]\displaystyle{ 0^{38457}, 2^{21552}, 4^{4743}, 6^{510}, 8^{18} }[/math] |
8.12 | [math]\displaystyle{ \alpha^{204}x^{160} + \alpha^{51}x^{48} + \alpha^{102}x^{12} + \alpha^{204}x^{10} + x^9 }[/math] | SW 22 | [math]\displaystyle{ 0^{38844}, 2^{20974}, 4^{4764}, 6^{654}, 8^{44} }[/math] |
8.13 | [math]\displaystyle{ \alpha^{160}x^{132} + \alpha^{10}x^{72} + x^{48} + \alpha x^{34} + \alpha^3x^{33} + \alpha^{48}x^{18} + x^{17} + x^3 }[/math] | B 31 | [math]\displaystyle{ 0^{39150}, 2^{20463}, 4^{4920}, 6^{675}, 8^{54}, 10^{12}, 12^6 }[/math] |
8.14 | [math]\displaystyle{ x^{144} + \alpha^{85}x^{96} + \alpha^{170}x^{80} + \alpha^{85}x^{65} + \alpha^{85}x^{17} + x^9 + x^5 }[/math] | B 12668 | [math]\displaystyle{ 0^{39408}, 2^{20072}, 4^{4922}, 6^{798}, 8^{70}, 10^{10} }[/math] |
8.15 | [math]\displaystyle{ x^{66} + \alpha^{170}x^{40} + x^{18} + \alpha^{85}x^5 + x^3 }[/math] | Y 4346 | [math]\displaystyle{ 0^{39408}, 2^{20218}, 4^{4692}, 6^{838}, 8^{104}, 10^{12}, 12^8 }[/math] |
8.16 | [math]\displaystyle{ x^{160} + x^{132} + x^{80} + x^{68} + x^6 + x^3 }[/math] | SW 20 | [math]\displaystyle{ 0^{39692}, 2^{19752}, 4^{4756}, 6^{978}, 8^{72}, 10^{26}, 12^4 }[/math] |
ID | Representative | Equivalent to | Orthoderivative diff. spec. |
---|---|---|---|
9.1 | [math]\displaystyle{ \alpha^{365}x^{257} + x^{96} + x^{68} + \alpha^{219}x^{33} + x^5 }[/math] | I 4 | [math]\displaystyle{ 0^{158529}, 2^{80829}, 4^{18144}, 6^{3283}, 8^{469}, 10^{294}, 12^{84} }[/math] |
9.2 | [math]\displaystyle{ \alpha^{438}x^{129} + x^{66} + \alpha^{219}x^{10} + x^3 }[/math] | I 8 | [math]\displaystyle{ 0^{159418}, 2^{79275}, 4^{18690}, 6^{3213}, 8^{742}, 10^{252}, 12^{21}, 16^{21} }[/math] |
9.3 | [math]\displaystyle{ x^{136} + x^{24} + x^{17} + \alpha^{73}x^{10} + x^3 }[/math] | I 3 | [math]\displaystyle{ 0^{159684}, 2^{78687}, 4^{19089}, 6^{3136}, 8^{777}, 10^{147}, 12^{84}, 14^{28} }[/math] |
9.4 | [math]\displaystyle{ x^{68} + \alpha^{73}x^{40} + x^{33} + x^5 }[/math] | I 10 | [math]\displaystyle{ 0^{159684}, 2^{79590}, 4^{17871}, 6^{3283}, 8^{700}, 10^{273}, 12^{147}, 14^{84} }[/math] |
9.5 | [math]\displaystyle{ \alpha^{73}x^{136} + \alpha^{146}x^{66} + \alpha^{219}x^{10} + x^3 }[/math] | I 16 | [math]\displaystyle{ 0^{159908}, 2^{79086}, 4^{18081}, 6^{3353}, 8^{721}, 10^{336}, 12^{105}, 14^{21}, 16^{21} }[/math] |
9.6 | [math]\displaystyle{ x^{264} + \alpha^{73}x^{96} + \alpha^{219}x^{68} + x^5 }[/math] | I 11 | [math]\displaystyle{ 0^{160020}, 2^{79023}, 4^{17997}, 6^{3213}, 8^{868}, 10^{378}, 12^{133} }[/math] |
9.7 | [math]\displaystyle{ \alpha^{219}x^{136} + x^{10} + x^3 }[/math] | I 12 | [math]\displaystyle{ 0^{160657}, 2^{77910}, 4^{18312}, 6^{3360}, 8^{952}, 10^{273}, 12^{147}, 14^{21} }[/math] |
9.8 | [math]\displaystyle{ x^{192} + x^{66} + x^{17} + \alpha^{73}x^{10} + x^3 }[/math] | I 14 | [math]\displaystyle{ 0^{162183}, 2^{76482}, 4^{17388}, 6^{3871}, 8^{1162}, 10^{252}, 12^{126}, 14^{126}, 16^{21}, 22^{21} }[/math] |
9.9 | [math]\displaystyle{ \alpha^{73}x^{192} + x^{136} + \alpha^{365}x^{129} + x^{17} + x^3 }[/math] | I 5 | [math]\displaystyle{ 0^{162708}, 2^{77175}, 4^{15498}, 6^{4270}, 8^{1260}, 10^{252}, 12^{168}, 14^{84}, 16^{126}, 18^{42}, 22^{42}, 26^7 }[/math] |
9.10 | [math]\displaystyle{ \alpha^{73}x^{129} + \alpha^{292}x^{66} + x^{10} + x^3 }[/math] | I 9 | [math]\displaystyle{ 0^{163009}, 2^{75537}, 4^{17283}, 6^{4116}, 8^{1071}, 10^{168}, 12^{231}, 14^{28}, 16^{84}, 18^{63}, 20^{42} }[/math] |
9.11 | [math]\displaystyle{ x^{80} + \alpha^{146}x^{66} + \alpha^{73}x^{24} + x^{17} }[/math] | I 13 | [math]\displaystyle{ 0^{163366}, 2^{75117}, 4^{17010}, 6^{4536}, 8^{966}, 10^{252}, 12^{63}, 14^{154}, 16^{63}, 18^{84}, 22^{21} }[/math] |
9.12 | [math]\displaystyle{ x^{129} + \alpha^{73}x^{66} + x^{17} + x^{10} + \alpha^{365}x^3 }[/math] | I 6 | [math]\displaystyle{ 0^{163996}, 2^{74802}, 4^{16380}, 6^{4368}, 8^{1449}, 10^{231}, 12^{126}, 14^{84}, 16^{42}, 18^{84}, 20^{42}, 22^{21}, 32^7 }[/math] |
9.13 | [math]\displaystyle{ \alpha^{73}x^{136} + \alpha^{219}x^{66} + \alpha^{438}x^{10} + x^3 }[/math] | I 15 | [math]\displaystyle{ 0^{168994}, 2^{68712}, 4^{15141}, 6^{6279}, 8^{1659}, 10^{336}, 12^{21}, 14^{21}, 16^{105}, 18^{147}, 20^{189}, 24^{21}, 26^7 }[/math] |
9.14 | [math]\displaystyle{ \alpha^{438}x^{129} + x^{66} + \alpha^{219}x^{17} + x^3 }[/math] | I 2 | [math]\displaystyle{ 0^{169428}, 2^{68040}, 4^{15561}, 6^{6034}, 8^{1533}, 10^{420}, 12^{126}, 14^{21}, 16^{84}, 18^{189}, 20^{126}, 22^{63}, 26^7 }[/math] |
9.15 | [math]\displaystyle{ \alpha^{365}x^{80} + \alpha^{292}x^{24} + \alpha^{219}x^{17} + x^3 }[/math] | I 17 | [math]\displaystyle{ 0^{170079}, 2^{66297}, 4^{16737}, 6^{6160}, 8^{1407}, 10^{420}, 12^{21}, 14^{42}, 16^{63}, 18^{210}, 20^{133}, 22^{63} }[/math] |
9.16 | [math]\displaystyle{ x^{257} + \alpha^{438}x^{68} + \alpha^{219}x^{12} + x^5 }[/math] | I 7 | [math]\displaystyle{ 0^{171430}, 2^{64617}, 4^{16842}, 6^{5733}, 8^{1932}, 10^{483}, 12^{105}, 14^{21}, 16^{147}, 18^{105}, 20^{154}, 22^{21}, 24^{42} }[/math] |
9.17 | [math]\displaystyle{ x^{80} + \alpha^{73}x^{66} + x^{17} + \alpha^{73}x^{10} + x^3 }[/math] | B 31 | [math]\displaystyle{ 0^{160440}, 2^{78834}, 4^{17514}, 6^{3388}, 8^{777}, 10^{483}, 12^{126}, 14^{49}, 16^{21} }[/math] |
9.18 | [math]\displaystyle{ \alpha^{365}x^{136} + x^{129} + \alpha^{73}x^{80} + x^{24} + x^{17} + x^3 }[/math] | B 34 | [math]\displaystyle{ 0^{164199}, 2^{76734}, 4^{13524}, 6^{4312}, 8^{2205}, 12^{147}, 16^{294}, 18^{147}, 20^{49}, 22^{21} }[/math] |
9.19 | [math]\displaystyle{ \alpha^{73}x^{320} + x^{96} + \alpha^{219}x^{68} + x^{40} + x^{33} + x^5 }[/math] | B 35 | [math]\displaystyle{ 0^{172557}, 2^{68355}, 4^{12201}, 6^{3871}, 8^{1638}, 10^{735}, 12^{1470}, 14^{49}, 16^{147}, 18^{441}, 20^{147}, 42^{21} }[/math] |