

Line 1: 
Line 1: 
−  * [http://ieeexplore.ieee.org/abstract/document/1683931/ On Almost Perfect Nonlinear Functions Over $\mathbb{F}_2^n$]
 +  Bla 
−  ** T.P. Berger , A. Canteaut , P. Charpin , Y. LaigleChapuy
 
−  ** We investigate some open problems on almost perfect nonlinear (APN) functions over a finite field of characteristic 2. We provide new characterizations of APN functions and of APN permutations by means of their component functions. We generalize some results of Nyberg (1994) and strengthen a conjecture on the upper bound of nonlinearity of APN functions. We also focus on the case of quadratic functions. We contribute to the current works on APN quadratic functions by proving that a large class of quadratic functions cannot be APN
 
−   
−   
−  * [https://link.springer.com/chapter/10.1007/9783642383489_24 New Links between Differential and Linear Cryptanalysis]
 
−  ** C. Blondeau, K. Nyberg
 
−  ** Recently, a number of relations have been established among previously known statistical attacks on block ciphers. Leander showed in 2011 that statistical saturation distinguishers are on average equivalent to multidimensional linear distinguishers. Further relations between these two types of distinguishers and the integral and zerocorrelation distinguishers were established by Bogdanov et al. [6]. Knowledge about such relations is useful for classification of statistical attacks in order to determine those that give essentially complementary information about the security of block ciphers. The purpose of the work presented in this paper is to explore relations between differential and linear attacks. The mathematical link between linear and differential attacks was discovered by Chabaud and Vaudenay already in 1994, but it has never been used in practice. We will show how to use it for computing accurate estimates of truncated differential probabilities from accurate estimates of correlations of linear approximations. We demonstrate this method in practice and give the first instantiation of multiple differential cryptanalysis using the LLR statistical test on PRESENT. On a more theoretical side, we establish equivalence between a multidimensional linear distinguisher and a truncated differential distinguisher, and show that certain zerocorrelation linear distinguishers exist if and only if certain impossible differentials exist.
 
−   
−   
−  * [https://link.springer.com/article/10.1023%2FA%3A1008344232130?LI=true Codes, Bent Functions and Permutations Suitable For DESlike Cryptosystems]
 
−  ** C. Carlet, P. Charpin, V. Zinoviev
 
−  ** Almost bent functions oppose an optimum resistance to linear and differential cryptanalysis. We
 
−   
−   
−  * [https://link.springer.com/chapter/10.1007/9783319162775_5 Open Questions on Nonlinearity and on APN Functions]
 
−  ** C. Carlet
 
−  ** In a first part of the paper, we recall some known open questions on the nonlinearity of Boolean and vectorial functions and on the APNness of vectorial functions. All of them have been extensively searched and seem quite difficult. We also indicate related less wellknown open questions. In the second part of the paper, we introduce four new open problems (leading to several related subproblems) and the results which lead to them. Addressing these problems may be less difficult since they have not been much worked on.
 
−   
−   
−  * [https://eprint.iacr.org/2017/516.pdf Characterizations of the differential uniformity of vectorial functions by the Walsh transform]
 
−  ** C. Carlet
 
−  ** TODO
 
−   
−   
−  * [http://www.sciencedirect.com/science/article/pii/S0885064X03001158 Highly nonlinear mappings]
 
−  ** C. Carlet, C. Ding
 
−  ** Functions with high nonlinearity have important applications in cryptography, sequences and coding theory. The purpose of this paper is to give a wellrounded treatment of nonBoolean functions with optimal nonlinearity. We summarize and generalize known results, and prove a number of new results. We also present open problems about functions with high nonlinearity.
 
−   
−   
−  * [https://link.springer.com/chapter/10.1007/BFb0053450 Links between differential and linear cryptanalysis]
 
−  ** F. Chabaud, S. Vaudenay
 
−  ** Linear cryptanalysis, introduced last year by Matsui, will most certainly openup the way to new attack methods which may be made more efficient when compared or combined with differential cryptanalysis.
 
−   
−   
−  * [https://link.springer.com/article/10.1007/s1062300891946 On the classification of APN functions up to dimension five]
 
−  ** M. Brinkmann, G. Leander
 
−  ** We classify the almost perfect nonlinear (APN) functions in dimensions 4 and 5 up to affine and CCZ equivalence using backtrack programming and give a partial model for the complexity of such a search. In particular, we demonstrate that up to dimension 5 any APN function is CCZ equivalent to a power function, while it is well known that in dimensions 4 and 5 there exist APN functions which are not extended affine (EA) equivalent to any power function. We further calculate the total number of APN functions up to dimension 5 and present a new CCZ equivalence class of APN functions in dimension 6.
 
−   
−   
−  * [http://www.sciencedirect.com/science/article/pii/S1071579707000718 New families of quadratic almost perfect nonlinear trinomials and multinomials]
 
−  ** C. Bracken, E. Byrne, N. Markin, G. McGuire
 
−  ** We introduce two new infinite families of APN functions, one on fields of order $2^{2k}$ for $k$ not divisible by $2$, and the other on fields of order $2^{3k}$ for $k$ not divisible by $3$. The polynomials in the first family have between three and $k+2$ terms, the second family's polynomials have three terms.
 
−   
−   
−  * [https://www.researchgate.net/publication/265815787_An_APN_permutation_in_dimension_six An APN permutation in dimension six]
 
−  ** KA Browning, JF Dillon, MT McQuistan, AJ Wolfe
 
−  ** TODO
 
−   
−   
−  * [http://ieeexplore.ieee.org/abstract/document/4036450/ An infinite class of quadratic APN functions which are not equivalent to power mappings]
 
−  ** L. Budaghyan, C. Carlet, P. Felke, G. Leander
 
−  ** We exhibit an infinite class of almost perfect nonlinear quadratic polynomials from F2n to F2n (n ges 12, n divisible by 3 but not by 9). We prove that these functions are EAinequivalent to any power function and that they are CCZinequivalent to any Gold function. In a forthcoming full paper, we shall also prove that at least some of these functions are CCZinequivalent to any Kasami function
 
−   
−   
−  * [http://ieeexplore.ieee.org/abstract/document/4608957/ Two Classes of Quadratic APN Binomials Inequivalent to Power Functions]
 
−  ** L. Budaghyan, C. Carlet, G. Leander
 
−  ** This paper introduces the first found infinite classes of almost perfect nonlinear (APN) polynomials which are not CarletCharpinZinoviev (CCZ)equivalent to power functions (at least for some values of the number of variables). These are two classes of APN binomials from F2n to F2n (for n divisible by 3, resp., 4). We prove that these functions are extended affine (EA)inequivalent to any power function and that they are CCZinequivalent to the Gold, Kasami, inverse, and Dobbertin functions when n ges 12. This means that for n even they are CCZinequivalent to any known APN function. In particular, for n = 12,20,24, they are therefore CCZinequivalent to any power function.
 
−   
−   
−  * [http://ieeexplore.ieee.org/abstract/document/4494676/ Classes of Quadratic APN Trinomials and Hexanomials and Related Structures]
 
−  ** L. Budaghyan, C. Carlet
 
−  ** A method for constructing differentially 4uniform quadratic hexanomials has been recently introduced by J. Dillon. We give various generalizations of this method and we deduce the constructions of new infinite classes of almost perfect nonlinear quadratic trinomials and hexanomials from $F_{2^{2m}}$ to $F_{2^{2m}}$. We check for $m = 3$ that some of these functions are CCZinequivalent to power functions.
 
−   
−   
−  * [http://ieeexplore.ieee.org/abstract/document/1603777/ New classes of almost bent and almost perfect nonlinear polynomials]
 
−  ** L. Budaghyan, C. Carlet, A. Pott
 
−  ** New infinite classes of almost bent and almost perfect nonlinear polynomials are constructed. It is shown that they are affine inequivalent to any sum of a power function and an affine function
 
−   
−   
−  * [http://www.sciencedirect.com/science/article/pii/S1071579707000160 A new class of monomial bent functions]
 
−  ** A. Canteaut, P. Charpin, G. Kyureghyan
 
−  ** We study the Boolean functions $f_{\lambda}:\mathbb{F}_{2^n} \rightarrow \mathbb{F}_{2^n} ,n=6r$, of the form $f(x)=\Tr(\lambda x^d)$ with $d=2^{2r}+2^r+1$ and $\lambda \in \mathbb{F}_{2^n}$. Our main result is the characterization of those $\lambda$ for which $f_\lambda$ are bent. We show also that the set of these cubic bent functions contains a subset, which with the constantly zero function forms a vector space of dimension $2^r$ over $\mathbb{F}_2$. Further we determine the Walsh spectra of some related quadratic functions, the derivatives of the functions $f_\lambda$.
 
−   
−   
−  * [http://www.sciencedirect.com/science/article/pii/S1071579708000622 Constructing new APN functions from known ones]
 
−  ** L. Budaghyan, C. Carlet, G. Leander
 
−  ** We present a method for constructing new quadratic APN functions from known ones. Applying this method to the Gold power functions we construct an APN function $x^3+\Tr(x^9)$ over $\mathbb{F}_{2^n}$. It is proven that for $n \ge 7$ this function is CCZinequivalent to the Gold functions, and in the case $n=7$ it is CCZinequivalent to any power mapping (and, therefore, to any APN function belonging to one of the families of APN functions known so far).
 
−   
−   
−  * [http://zoo.cs.yale.edu/classes/cs426/2012/bib/biham91differential.pdf Differential cryptanalysis of DESlike cryptosystems]
 
−  ** Biham E, Shamir A.
 
−  ** The Data Encryption Standard (DES) is the best known and most widely usedc ryptosystem for civilian applications.It was developed at IBM and adopted by the National Buraeu of Standards in the mid 70's, and has successfully withstood all the attacks published so far in the open literature. In this paper we develop a new type of cryptanalytic attack which can break the reduced variant of DES with eight rounds in a few minutes on a PC and can break any reduced variant of DES (with up to 15 rounds) in less than 256 operations.The new attack can be applied to a variety of DESlike substitution/permutation cryptosystems, and demonstrates the crucial role of the (unpublished) design rules.
 
−   
−   
−  * [https://link.springer.com/chapter/10.1007%2F3540482857_33 Linear Cryptanalysis Method for DES Cipher]
 
−  ** M. Matsui
 
−  ** We introduce a new method for cryptanalysis of DES cipher, which is essentially a knownplaintext attack. As a result, it is possible to break 8round DES cipher with $2^{21}$ knownplaintexts and 16round DES cipher with $2^{47}$ knownplaintexts, respectively. Moreover, this method is applicable to an onlyciphertext attack in certain situations. For example, if plaintexts consist of natural English sentences represented by ASCII codes, 8round DES cipher is breakable with $2^{29}$ ciphertexts only.
 
−   
−   
−  * [https://link.springer.com/chapter/10.1007/3540482857_6 Differentially uniform mappings for cryptography]
 
−  ** K. Nyberg
 
−  ** This work is motivated by the observation that in DESlike ciphers it is possible to choose the round functions in such a way that every nontrivial oneround characteristic has small probability. This gives rise to the following definition. A mapping is called differentially uniform if for every nonzero input difference and any output difference the number of possible inputs has a uniform upper bound. The examples of differentially uniform mappings provided in this paper have also other desirable cryptographic properties: large distance from affine functions, high nonlinear order and efficient computability.
 
−   
−   
−  * [https://link.springer.com/chapter/10.1007/9783642567551_11 Almost Perfect Nonlinear Power Functions on $GF(2^n)$: A New Case for n Divisible by 5]
 
−  ** H. Dobbertin
 
−  ** We prove that for $d = 2^{4s} + 2^{3s} + 2^{2s} + 2^s − 1$ the power function $x^d$ is almost perfect nonlinear (APN) on $L = GF(2^{5s})$, i.e. for each $a \in L$ the equation $(x + 1)^d + x^d = a$ has either no or precisely two solutions in $L$. The proof of this result is based on a new “multivariate” technique which was recently introduced by the author in order to confirm the conjectured APN property of Welch and Niho power functions.
 
−   
−   
−  * [http://www.sciencedirect.com/science/article/pii/S089054019892764X Almost Perfect Nonlinear Power Functions on $GF(2^n)$: The Niho Case]
 
−  ** H. Dobbertin
 
−  ** Almost perfect nonlinear (APN) mappings are of interest for applications in cryptography. We prove for odd $n$ and the exponent $d=2^{2r}+2^r−1$, where $4r+1 \equiv 0 mod n$, that the power functions $x^d$ on $GF(2^n)$ is APN. The given proof is based on a new class of permutation polynomials which might be of independent interest. Our result supports a conjecture of Niho stating that the power function $x^d$ is even maximally nonlinear or, in other terms, that the crosscorrelation function between a binary maximumlength linear shift register sequences of degree $n$ and a decimation of that sequence by $d$ takes on precisely the three values $−1$, $−1 \pm 2^{(n+1)/2}$.
 
−   
−  * [https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=761283 Almost Perfect Nonlinear Power Functions on $GF(2^n)$ : The Welch Case ]
 
−  ** H. Dobbertin
 
−  ** We summarize the state of the classification of almost perfect nonlinear (APN) power functions $x^d$ on $GF(2^n)$ and contribute two new cases. To prove these cases we derive new permutation polynomials. The first case supports a wellknown conjecture of Welch stating that for odd $n=2m+1$, the power function $x^{2m+3}$ is even maximally nonlinear or, in other terms, that the crosscorrelation function between a binary maximumlength linear shift register sequence of degree $n$ and a decimation of that sequence by $2^{m}+3$ takes on precisely the three values $1$, $1 \pm 2^{ m+1}$.
 
−   
−   
−  * [Y. Edel, A. Pott https://pdfs.semanticscholar.org/0d6c/71fac2ec96cfe437a02e558fd26a33ea5bed.pdf]
 
−  ** A new almost perfect nonlinear function which is not quadratic
 
−  ** Following an example in [13], we show how to change one coordinate function of an almost perfect nonlinear (APN) function in order to obtain new examples. It turns out that this is a very powerful method to construct new APN functions. In particular, we show that the approach can be used to construct “nonquadratic” APN functions. This new example is in remarkable contrast to all recently constructed functions which have all been quadratic.
 
−   
−   
−  * [http://ieeexplore.ieee.org/abstract/document/1580810/ A new APN function which is not equivalent to a power mapping]
 
−  ** Y. Edel, G. Kyureghyan, A. Pott
 
−  ** A new almostperfect nonlinear function (APN) on $\mathbb{F}_{2^{10}$ which is not equivalent to any of the previously known APN mappings is constructed. This is the first example of an APN mapping which is not equivalent to a power mapping.
 