arxiv: v1 [math.co] 6 Jan 2019

Transcription

1 BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS arxiv: v1 [math.co] 6 Jan 2019 DANIELE BARTOLI, MARIA MONTANUCCI, AND GIOVANNI ZINI Abstract. We provide constructions of bent functions using triples of permutations. This approach is due to Mesnager. In general, involutions have been mostly considered in such a machinery; we provide some other suitable triples of permutations, using monomials, binomials, trinomials, and quadrinomials. Keywords: Permutation; Boolean function; bent function; monomial, binomial, trinomial. 1. Introduction Bent functions are Boolean functions with an even number of variables which achieves the maximum possible nonlinearity. They have been introduced by Rothaus [21] and Dillon [11] in the Seventies and they have interesting applications in Combinatorics and Design Theory difference sets and symmetric designs), Coding Theory several types of codes such as Reed-Muller codes [9] and two-weight codes [1]), Cryptography [3], Sequence Theory [19], Graph Theory [20]. A complete classification of bent functions seems to be hopeless, although in the last years explicit constructions of such functions have been provided, using different techniques. For a more detailed introduction on this topic we refer to [2,4 6,12,16] and the references therein. Some recent constructions of bent functions rely on an approach due to Mesnager [14], where triples of permutations satisfying particular constraints are needed; see Definition 2.2. In general, involutions have been mostly considered in such a machinery; see [8,10,18]. In this paper, we provide some other families of permutations which can be used to construct bent functions. In particular, we use triples of monomials which are not all involutions see Theorem 3.1), monomials and binomials see Theorem 3.3), monomials and trinomials see Theorem 3.6), binomials of order four see Theorem 3.3). 2. Bent functions and permutations Let q = 2 n, n N, and denote by F q the finite field with q elements. A boolean function on F q is a map from F q to F 2. On the one hand each boolean function can be represented as a polynomial fx) = q 1 j=0 a jx j F q [x]. On the other hand a polynomial fx) of this shape corresponds to a boolean function if and only if a 0,a q 2 F 2 and a 2j mod q 1) = a 2 j for all j 0,q 1. In this case fx) is the polynomial form of the boolean function; see [3]. In the case n even, boolean functions can be described by a bivariate representation. Let n = 2m and identify F q with F 2 m F 2 m. Each element of F q can be uniquely described by a pair x,y) F 2 2 m. Then, each polynomial function f over F q can be determined, by Lagrange interpolation, by a unique 1

2 bivariate polynomial BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS 2 0 i, j 2 m 1 a i,j x i y j F 2 m[x,y]. Each Boolean function can be written non-uniquely) in the form fx,y) = Tr1 m Px,y)), where Px,y) F 2 m[x,y] and Tr1 m denotes the trace function from F 2 m to F 2 defined by Tr1 mx) = + x2m 1 x 2m 2 + +x 2 +x. For a boolean function f on F 2 n, its Walsh-Hadamard transform χ f : F 2 n Z is defined as follows: χ f z) = 1) fx)+trn 1 zx). x F 2 n Definition 2.1. Let n N be even. A Boolean function f on F 2 n is called bent if its Walsh-Hadamard transform satisfies χ f z) = ±2 n/2 for all z F 2 n. Bent functions of the bilinear) form Tr m Φy)x) + gy), where x,y) F 2 m F 2 m, m 1, Φ is a permutation of F 2 m and g is any Boolean function over F 2 m, are called Maiorana-McFarland bent functions; see [13]. In this paper we construct bent functions following the approach used in [10, 18]. The ingredients are permutations of F 2 n satisfying the following property A n ). Definition 2.2. [10,15] Let n be a positive integer and q = 2 n. Three permutations Φ 1, Φ 2 and Φ 3 of F q are said to satisfy A n ) if the following two conditions hold: 1) their sum Ψ = Φ 1 +Φ 2 +Φ 3 is a permutation of F q ; 2) Ψ 1 = Φ 1 1 +Φ 1 2 +Φ 1 3. In Section 3 we will construct triples of permutations satisfying property A n ). The key result to construct bent functions from such triples is the following theorem. Theorem 2.3. [14] Let n be a positive integer and q = 2 n. Consider three permutations Φ 1, Φ 2, Φ 3 of F q. Then the Boolean function gx,y) = Tr n 1 xφ 1y))Tr n 1 xφ 2y)) +Tr n 1 xφ 2y))Tr n 1 xφ 3y)) +Tr n 1xΦ 1 y))tr n 1xΦ 3 y)) is bent over F q if and only if Φ 1, Φ 2, Φ 3 satisfy property A n ). The above theorem has been used to construct bent functions starting from monomial permutations [14], involutions [10,17], or other families of permutations satisfying property A n ) [15]. In this paper we construct bent functions starting from triples of permutations which are monomials see Theorem 3.1), binomials and monomials see Theorem 3.3), monomials and trinomials see Theorem 3.6), binomials and quadrinomials see Theorem 3.8), monomials and quadrinomials see Theorem 3.9). A general problem, when dealing with bent functions, is the equivalence issue. For many bent functions so far constructed, the equivalence question is still open. Also, if an answer is given, the most common result is a proof that they are Extended Affine equivalent to a Maiorana-McFarland bent

3 BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS 3 function. The authors in [10] give an easy criterion to decide wether a triple Φ 1,Φ 2,Φ 3 ) satisfying property A n ) is a Maiorana-McFarland bent function; see [10, Theorem 5]. For each pair i,j), 1 i < j 3, let us define 1) E i,j = {x F q : Φ i x) = Φ j x)}, E = i j E ij. By [10, Theorem 5], if the permutations Φ i i = 1,2,3) are such that E = F q, then the construction of Theorem 2.3 gives rise to a Maiorana-McFarland bent function. 3. Bent functions from triples of permutations satisfying property A m ) In this section we present our main results concerning the construction of bent functions via triples of permutations which are monomials see Theorem 3.1), binomials and monomials see Theorem 3.3), monomials and trinomials see Theorem 3.6), binomials and quadrinomials see Theorem 3.8), monomials and quadrinomials see Theorem 3.9). We show that such triples satisfy the hypothesis of Theorem 2.3, which can then be applied to obtain bent functions over F 2 4m Theorems 3.1, 3.3, 3.8, 3.9) or over F 2 6m Theorem 3.6). We start we a construction involving monomials. Theorem 3.1. Let m be a positive integer and λ F 2 4m be such that λ 2m +1 = 1. The triple 2) Φ 1,Φ 2,Φ 3 ) = x 22m,λx 2m,λx 23m ) satisfies A 4m ) and E F 2 4m. Proof. Clearly Φ i, i = 1,2,3, is a permutation of F 2 4m. It is easily seen that Φ 1 1,Φ 1 2,Φ 1 3 ) = Φ 1,Φ 3,Φ 2 ) and therefore Ψ = Φ 1 + Φ 2 + Φ 3 = Φ Φ Φ 1 3. Also, Ψ is a permutation of F 2 4m since it is linearized and Ψx) = 0 with x F 2 4m if and only if x = 0. In fact, we have 1 λx 2m +x 22m +λx 23m = ) 2m = 0 x+λx λ x+x2m λ x22m 2m +x 22m = 0. Consider now x F 2 4m such that x+λx 2m +x 22m = 0. Then x+λx ) ) x = x 24m 2 = m 2 m 2 m = x 2m + 1λ ) 2 m = x22m from which we get x 22m = 0, that is x = 0. Also, for any x F 2 4m, ΨΨx)) = λ λx 2m +x 22m +λx 23m) 2 m + λx 2m +x 22m +λx 23m) 2 2m = x 22m +λx 23m +x+λx 23m +x+λx 2m +x+λx 2m +x 22m = x, ) 2 m 1 λ x = λx 2m, +λ λx 2m +x 22m +λx 23m) 2 3m that is Ψ = Φ 1 +Φ 2 +Φ 3 = Φ 1 1 +Φ 1 2 +Φ 1 3 = Ψ 1 and property A 4m ) holds. Finally, E = {x F 2 4m : x 22m = λx 2m or x 22m = λx 23m or λx 2m = λx 23m } and E 2 2m +2 m < 2 4m = F 2 4m. = {x F 2 4m : λx 2m = x or x = x 22m }

4 BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS 4 When using binomials, the following proposition is a key result. Proposition 3.2. Suppose Φx) = αx 2i +βx 2j is a permutation of F 2 n with i < j < n. If Φ 1 x) is a linearized binomial then n = 2m and j = m+i for a positive integer m, and Φ 1 x) = γx 2m i +δx 22m i, where 3) γ = β 2m α 2m +1 +β 2m +1 ) 2 m i, δ = α α 2m +1 +β 2m +1 ) 2 m i Also, if n = 2m, i < m, j = m+i and α,β F 2 n satisfy α 2m +1 β 2m +1, then Φx) is a permutation of F 2 n with Φx) 1 = γx 2m i +δx 22m i, where γ and δ are given in Equation 3). Proof. Let Φ 1 x) = γx 2k +δx 2l with γ,δ F 2 n and k < l < n. Then Φ Φ 1 x) = αγ 2i x 2k+i +αδ 2i x 2l+i +βγ 2j x 2k+j +βδ 2j x 2j+l x mod x 2n x) only if k+i l+j mod n) and l+i k+j mod n). This implies that n is even, say n = 2m; also, j = m+i, l = k +m. Then one between k +i and k +j vanishes modulo n. If k+i 0 mod n), then either k or i is at least m, so that either l or j is at least n, a contradiction to the assumptions. Hence, k +j 0 mod 2m), that is k +i m mod 2m). This forces k = m i and l = 2m i. Then Φ Φ 1 x) = αγ 2i +βδ 2m+i) x m + αδ 2i +βγ 2m+i) x equals x mod x 2n x) if and only if 4) αγ 2i +βδ 2m+i = 0, αδ 2i +βγ 2m+i = 1. From Φ 1 Φx) x mod x 2n x) it follows also 5) γα 2m i +δβ 22m i = 0, γβ 2m i +δα 22m i = 1. By the uniqueness of Φ 1 x), we have that α 2m +1 β 2m +1 and γ,δ are as in Equation 3) and satisfy both Equations 4) and 5). If n = 2m, i < m, j = m+i, α,β F 2 n satisfy α 2m +1 β 2m +1, and γ,δ as in Equation 3), then it is readily seen that Φx) is a permutation and Φ 1 x) = γx 2m i +δx 22m i. As an application, we produce triples of permutation polynomials satisfying property A n ) using binomials. Theorem 3.3. Let m be a positive integer, α F 2 m. The triple 6) Φ 1,Φ 2,Φ 3 ) = x 22m,αx 2m +α+1)x 23m,α+1)x 2m +αx 23m ) satisfies A 4m ) and E F 2 4m..

5 BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS 5 Proof. It is easily seen that Φ 2 and Φ 3 are bijections and Φ 1 2 = Φ 3, by Proposition 3.2. Also, is an involution and Ψx) = Φ 1 x)+φ 2 x)+φ 3 x) = x 2m +x 22m +x 23m Φ 1 1 x)+φ 1 2 x)+φ 1 3 x) = Φ 1 x)+φ 2 x)+φ 3 x) = Ψx) = Ψ 1 x). Therefore, Φ 1,Φ 2,Φ 3 ) satisfies A 4m ). Arguing as in Proposition 3.1 it is easily seen that E 2 2m +2 m < 2 4m = F 2 4m and the claim follows. Remark 3.4. It is worth noting that binomials have been already used in [10, Theorem 7], where the authors use the classification given in [7, Proposition 5] of the linear binomial involutions of F 2 m. In Theorem 3.3 we do not use involutions. Trinomials are investigated in the next proposition. Proposition 3.5. Let m be a positive integer. Two trinomials Φx) = αx 2m +βx 23m +γx 25m F 2 6m[x], Ψx) = αx 2m +βx 23m +γx 25m F 2 6m[x] satisfy Φ Ψx) = Ψ Φx) = x for each x F 2 6m if and only if αγ 2m +ββ 23m +γα 25m = 1 7) αα 2m +βγ 23m +γβ 25m = 0 αβ 2m +βα 23m +γγ 25m = 0 and 8) det Proof. By direct checking Ψ Φx) equals αγ 2m +ββ 23m +γα 25m) x+ γ 2m β 23m α 25m α 2m γ 23m β 25m β 2m α 23m γ 25m 0. αα 2m +βγ 23m +γβ 25m) x 22m + αβ 2m +βα 23m +γγ 25m) x 24m. So, if Ψ = Φ 1, then Ψ Φx) = x for all x F 2 6m, and 7) holds. Thus, 7) has a unique solution α,β,γ) and 8) holds. On the other hand, if α,β,γ) is a solution of 7) and 8) holds, Φ Ψx) = x for each x F 2 6m and Ψ = Φ 1. Particular choices of permutation trinomials give rise to the following triples of functions satisfying property A n ). Theorem 3.6. Let m be a positive, α,β F 2 2m be such that either i) α = β, α 2m +α 2m 1 +1 = 0, or ii) β = α+1, α 2m +1 = 1, α 1.

6 The triple BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS 6 9) Φ 1,Φ 2,Φ 3 ) = x 2m,αx 2m +βx 23m +α+1)x 25m,α+1)x 2m +βx 23m +αx 25m ) satisfies A 6m ) and E F 2 6m. Proof. By direct checking the 6-tuple α,β,γ,α,β,γ) = α,β,α+1,α+1,β,α), where α and β are as in i) or ii), satisfies Conditions 7) and 8) therefore Φ 1 2 = Φ 3. Also, Ψx) = Φ 1 x)+φ 2 x)+φ 3 x) = x 2m +x 2m +x 25m = x 25m is a bijection and Φ 1 1 x)+φ 1 2 x)+φ 1 3 x) = = Ψ 1 x) x2m over F 2 6m. Hence, Φ 1,Φ 2,Φ 3 ) satisfies A m ). Arguing as in Proposition, 3.1 E 2 4m +2 4m +2 4m < 2 6m = F 2 6m and the claim follows. The last part of this section involves permutation quadrinomials. Lemma 3.7. Let q be a power of 2, C F q, D F q 2. Then the polynomial fx) = Cx+Dx q +C + 1)x q2 +Dx q3 is an involution over F q 4. Proof. By direct computation, f 2 x) = C Cx+Dx q +C +1)x q2 +Dx q3) +D ) Cx q +D q x q2 +C +1)x q3 +D q x ) +C +1) Cx q2 +Dx q3 C +1)x+Dx q +D Cx q3 +D q x+c +1)x q +D q x q2). Since q is even, this implies f 2 x) = x. Theorem 3.8. Let α F 2 m and β F 2 2m be such that β 2m +1 = α Then the triple Φ 1,Φ 2,Φ 3 ) = αx+βx 2m,α 2 x+β 2m +1 x 22m,α 3 x+α 2 βx 2m +αβ 2m +1 x 22m +β 2m +2 x 23m) satisfies A 4m ) and E F 2 4m. Proof. By direct checking, Φ i x) = Φ i 1 x) for all x F 2 4m, i = 2,3, and Φ 2x) is an involution over F 2 4m by Lemma 3.7, so that Φ 3 x) = Φ 1 1 x) over F 2 4m. Also, for all x F 2 4m, we have Ψx) = Φ 1 x)+φ 2 x)+φ 3 x) = α+α 2 +α 3 )x+α 2 +1)βx 2m +1+α+α 2 +α 3 )x 22m +α 2 +1)βx 23m and Φ 1 1 x)+φ 1 2 x)+φ 1 3 x) = Ψx) = Ψ 1 x). Thus, Φ 1,Φ 2,Φ 3 ) satisfies A 4m ) and E 2 m +2 2m +2 3m < 2 4m = F 2 4m. The claim follows. Theorem 3.9. Let C F 2 m, D F 2 2m, and λ F 2 2m be such that λ 2m +1 = 1. Then the triple Φ 1,Φ 2,Φ 3 ) = λx 2m,λx 23m,Cx+Dx 2m +C +1)x 22m +Dx 23m) satisfies A 4m ) and E F 2 4m.

7 BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS 7 Proof. From λ 2m +1 = 1 follows Φ 2 x) = Φ 1 1 x) for all x F 2 4m. Also, Φ 3x) is an involution over F 2 4m by Lemma 3.7. Then Ψx) = Φ 1 x)+φ 2 x)+φ 3 x) = Cx+D +λ)x 2m +C +1)x 22m +D+λ)x 23m is an involution over F 2 4m by Lemma 3.7, and Ψ 1 x) = Φ 1 1 x)+φ 1 2 x)+φ 1 3 x) = Ψx). Thus, Φ 1,Φ 2,Φ 3 ) satisfies A 4m ). If m 2, then E 2 m +2 3m +2 3m < 2 4m = F 2 4m. Suppose m = 1. Then E 1,2 = {0,1,λ,λ 2 } has sizeatmost4. Also, theelementsofe 1,3 aretherootsinf 16 offt) = DT 8 +C+1)T 4 +D+λ)T 2 +CT. By direct checking, gcdft),t 16 + T) has order at most 4. Since {0,λ 2 } E 1,2 E 1,3, the size of E 1,2 E 1,3 is at most 6. Thus, E has size at most 6+8 < 16 and the claim follows. 4. Acknowledgments The research of D. Bartoli, M. Montanucci, G. Zini was partially supported by the Italian National Group for Algebraic and Geometric Structures and their Applications GNSAGA - INdAM). References [1] R. Calderbank and W. M. Kantor, The geometry of two-weight codes, Bull. London Math. Soc., vol. 18, no. 2, pp , [2] C. Carlet, On bent and highly nonlinear balanced/resilient functions and their algebraic immunities, in: Applied Algebra, Algebraic Algorithms and Error-Correcting Codes, Berlin, Germany: Springer, 2006, pp [3] C. Carlet, Boolean functions for cryptography and error correcting codes, in Boolean Models and Methods in Mathematics, Computer Science, and Engineering, Y. Crama and P. L. Hammer, Eds. Cambridge, U.K.: Cambridge Univ. Press, 2010, pp [4] C. Carlet, Open problems on binary bent functions, in Open Problems in Mathematics and Computational Science, Cham, Switzerland: Springer, 2014, pp [5] C. Carlet and S. Mesnager, On Dillon s class H of bent functions, Niho bent functions and O-polynomials, J. Combinat. Theory A, vol. 118, no. 8, pp , [6] C. Carlet and S. Mesnager, Four decades of research on bent functions, Des. Codes Cryptograph., vol. 78, no. 1, pp. 5 50, [7] P. Charpin, S. Mesnager, and S. Sarkar, On involutions of finite fields, in Proc. IEEE Int. Symp. Inf. Theory ISIT), 2015, pp [8] P. Charpin, S. Mesnager, and S. Sarkar, Involutions over the Galois field F 2 n, IEEE Trans. Inf. Theory, vol. 62, no. 4, pp , [9] G. Cohen, I. Honkala, S. Litsyn, and A. Lobstein, Covering Codes Amsterdam, The Netherlands: North Holland, [10] R.S. Coulter and S. Mesnager, Bent Functions From Involutions Over F 2 n, IEEE Trans. Inf. Theory, vol. 64, no. 4, pp , [11] J.F. Dillon, Elementary Hadamard difference sets, Ph.D. disseration, Univ. Maryland, College Park, MD, USA, [12] G.M. Kyureghyan, Constructing permutations of finite fields via linear translators, J. Combinat. Theory A, vol. 118, no. 3, pp , [13] R.L. McFarland, A family of difference sets in non-cyclic groups, J. Combinat. Theory A, vol. 15, no 1, pp. 1 10, 1973.

8 BENT FUNCTIONS FROM TRIPLES OF PERMUTATION POLYNOMIALS 8 [14] S. Mesnager, Several new infinite families of bent functions and their duals, IEEE Trans. Inf. Theory, vol. 60, no 7, pp , [15] S. Mesnager, Further constructions of infinite families of bent functions from new permutations and their duals, Cryptograph. Commun., vol. 8, no. 2, pp , [16] S. Mesnager, Bent Functions: Fundamentals and Results, New York, NY, USA: Springer-Verlag, [17] S. Mesnager, On constructions of bent functions from involutions, in Proc. ISIT, Jul. 2016, pp [18] S. Mesnager, G. Cohen, and D. Madore, On existence based on an arithmetical problem) and constructions of bent functions, in Proc. 15th Int. Conf. Cryptograph. Coding, 2015, pp [19] J. D. Olsen, R. A. Scholtz, and L. R. Welch, Bent-function sequences, IEEE Trans. Inf. Theory, vol. 28, no. 6, pp , Nov [20] A. Pott, Y. Tan, and T. Feng, Strongly regular graphs associated with ternary bent functions, J. Combinat. Theory, Ser. A, vol. 117, no. 6, pp , [21] O.S. Rothaus, On bent functions, J. Combinat. Theory A, vol. 20, no. 3, pp , Dipartimento di Matematica e Informatica, Università degli Studi di Perugia, Perugia, Italy address: daniele.bartoli@unipg.it Dipartimento di Tecnica e Gestione dei Sistemi Industriali, Università degli Studi di Padova, Vicenza, Italy address: mariamontanucci@gmail.com Dipartimento di Matematica e Applicazioni, Università degli Studi di Milano-Bicocca, Milano, Italy address: giovanni.zini@unimib.it