Comments on "Generating and Counting Binary Bent Sequences"

Similar documents
Structures of cryptographic functions with strong avalanche characteristics

Non-Separable Cryptographic Functions

Generalized hyper-bent functions over GF(p)

Some new constructions of orthogonal designs

Perfect Secret Sharing Schemes from Room Squares

An infinite family of Goethals-Seidel arrays

The primary aim of this paper is to introduce a new class of functions to facilitate the design of cryptographically good functions. It turns out that

On Cryptographic Properties of the Cosets of R(1;m)

A New Class of Bent Negabent Boolean Functions

On the Symmetric Property of Homogeneous Boolean Functions

Minimal and Maximal Critical Sets in Room Squares

Well known bent functions satisfy both SAC and PC(l) for all l n, b not necessarily SAC(k) nor PC(l) of order k for k 1. On the other hand, balancedne

Complex Numbers: Definition: A complex number is a number of the form: z = a + bi where a, b are real numbers and i is a symbol with the property: i

Quadratic Almost Perfect Nonlinear Functions With Many Terms

Review all the activities leading to Midterm 3. Review all the problems in the previous online homework sets (8+9+10).

Decomposing Bent Functions

On integer matrices obeying certain matrix equations

Nonlinearity and propagation characteristics of balanced boolean functions

An infinite family of skew weighing matrices

Pitfalls in designing substitution boxes

New weighing matrices and orthogonal designs constructed using two sequences with zero autocorrelation function - a review

Supplementary difference sets and optimal designs

DIFFERENTIAL cryptanalysis is the first statistical attack

A Z q -Fan theorem. 1 Introduction. Frédéric Meunier December 11, 2006

The amicable-kronecker construction of quaternion orthogonal designs

Weighing matrices and their applications

Third-order nonlinearities of some biquadratic monomial Boolean functions

Generation of a frequency square orthogonal to a 10 x 10 Latin square

Constructions of Quadratic Bent Functions in Polynomial Forms

Bose's method of differences applied to construct Bhaskar Rao designs

Generalized Bhaskar Rao designs with elements from cyclic groups of even order

CCZ-equivalence and Boolean functions

Homework 8 Solutions to Selected Problems

Highly nonlinear 0-1 balanced boolean functions satisfying strict avalanche criterion

Higher dimensional orthogonal designs and Hadamard matrices

On small defining sets for some SBIBD(4t-1, 2t-1, t-1)

nonlinearities to resist certain attacks on these ciphers (correlation and linear attacks). A Boolean function is called bent if its nonlinearity equa

Semi Williamson type matrices and the W(2n, n) conjecture

Complete characterization of generalized bent and 2 k -bent Boolean functions

A New Characterization of Semi-bent and Bent Functions on Finite Fields

IN this paper, we exploit the information given by the generalized

Finding Low Degree Annihilators for a Boolean Function Using Polynomial Algorithms

Chapter 7 Polynomial Functions. Factoring Review. We will talk about 3 Types: ALWAYS FACTOR OUT FIRST! Ex 2: Factor x x + 64

New Families of Triple Error Correcting Codes with BCH Parameters

Cryptographically Robust Large Boolean Functions. Debdeep Mukhopadhyay CSE, IIT Kharagpur

6054 IEEE TRANSACTIONS ON INFORMATION THEORY, VOL. 58, NO. 9, SEPTEMBER 2012

Some properties of q-ary functions based on spectral analysis

Elementary 2-Group Character Codes. Abstract. In this correspondence we describe a class of codes over GF (q),

arxiv: v5 [cs.it] 4 Nov 2009

Some matrices of Williamson type

1-Resilient Boolean Function with Optimal Algebraic Immunity

Homework 7 Solutions to Selected Problems

Balanced Boolean Function on 13-variables having Nonlinearity strictly greater than the Bent Concatenation Bound

17 Galois Fields Introduction Primitive Elements Roots of Polynomials... 8

Ch 7 Summary - POLYNOMIAL FUNCTIONS

CYCLIC SEPARABLE GOPPA CODES

2 EBERHARD BECKER ET AL. has a real root. Thus our problem can be reduced to the problem of deciding whether or not a polynomial in one more variable

, a 1. , a 2. ,..., a n

Some remarks on Hadamard matrices

Hyperbent functions, Kloosterman sums and Dickson polynomials

Hadamard Matrices, Bent Functions and Cryptography. The University of Wollongong. Abstract

On Boolean functions which are bent and negabent

Tropical Polynomials

Statements, Implication, Equivalence

Mathematical Olympiad Training Polynomials

Construction of 1-Resilient Boolean Functions with Optimal Algebraic Immunity and Good Nonlinearity

arxiv: v1 [cs.it] 12 Jun 2016

CHAPTER 4: Polynomial and Rational Functions

Algebra Review 2. 1 Fields. A field is an extension of the concept of a group.

Dickson Polynomials that are Involutions

Automorphism group of the set of all bent functions

LECTURE NOTES IN CRYPTOGRAPHY

CHAPTER 2 POLYNOMIALS KEY POINTS

The average dimension of the hull of cyclic codes

Constructing Hadamard matrices via orthogonal designs

On a generalized combinatorial conjecture involving addition mod 2 k 1

Rings. EE 387, Notes 7, Handout #10

On values of vectorial Boolean functions and related problems in APN functions

Bent Functions of maximal degree

On Binary Cyclic Codes with Codewords of Weight Three and Binary Sequences with the Trinomial Property

6x 3 12x 2 7x 2 +16x 7x 2 +14x 2x 4

A note on Devaney's definition of chaos

Smart Hill Climbing Finds Better Boolean Functions

A construction for orthogonal designs with three variables

1. Definition of a Polynomial

Lacunary Polynomials over Finite Fields Course notes

Tenth Maths Polynomials

New Constructions for Resilient and Highly Nonlinear Boolean Functions

Section 0.2 & 0.3 Worksheet. Types of Functions

Downloaded from

Generalized Correlation Analysis of Vectorial Boolean Functions

Some results on the roots of the independence polynomial of graphs

Vector Space Basics. 1 Abstract Vector Spaces. 1. (commutativity of vector addition) u + v = v + u. 2. (associativity of vector addition)

Chapter 8. Exploring Polynomial Functions. Jennifer Huss

A note on orthogonal designs

1 Solving Algebraic Equations

Linear Algebra (part 1) : Vector Spaces (by Evan Dummit, 2017, v. 1.07) 1.1 The Formal Denition of a Vector Space

Georgia Department of Education Common Core Georgia Performance Standards Framework CCGPS Advanced Algebra Unit 2

Skew Cyclic Codes Of Arbitrary Length

Lesson 11: The Special Role of Zero in Factoring

Transcription:

University of Wollongong Research Online Faculty of Informatics - Papers (Archive) Faculty of Engineering and Information Sciences 1994 Comments on "Generating and Counting Binary Bent Sequences" Claude Carlet Jennifer Seberry University of Wollongong, jennie@uow.edu.au Xian-Mo Zhang University of Wollongong, xianmo@uow.edu.au Publication Details Claude Carlet, Jennifer Seberry and Xian-Mo Zhang Comments on "Generating and Counting Binary Bent Sequences", IEEE Transactions on Information Theory 40, (1994), 600-600. Research Online is the open access institutional repository for the University of Wollongong. For further information contact the UOW Library: research-pubs@uow.edu.au

Comments on "Generating and Counting Binary Bent Sequences" Abstract We prove that the conjecture on bent sequences stated in"generating and counting bent sequences". IEEE Transactions on Information Theory, IT-36 No. 5, 1990 by C.M. Adams and S.E. Tavares is false. Disciplines Physical Sciences and Mathematics Publication Details Claude Carlet, Jennifer Seberry and Xian-Mo Zhang Comments on "Generating and Counting Binary Bent Sequences", IEEE Transactions on Information Theory 40, (1994), 600-600. This journal article is available at Research Online: http://ro.uow.edu.au/infopapers/1088

Comments on \Generating and Counting Binary Bent Sequences" Claude Carlet INRIA Rocquencourt, Domaine de Voluceau Bat 10, BP 105, 78153 Le Chesnay Cedex, France Universite de Picardie, France Jennifer Seberry and Xian-Mo Zhang Department of Computer Science The University of Wollongong Wollongong, NSW 2522, Australia Abstract We prove that the conjecture on bent sequences stated in \Generating and counting bent sequences", IEEE Transactions on Information Theory, IT-36 No. 5, 1990 by C.M. Adams and S.E. Tavares is false. Let V n be the vector space of n tuples of elements from GF (2). Any map from V n to GF (2), f, can be uniquely written as a polynomial M in coordinates x 1, :::, x n [3], [4]: f(x 1 ::: x n )= v2vn a v x v 1 1 xvn n where denotes the boolean addition, v =(v 1 ::: v n ), a v 2 GF (2). Thus we identify the function f with polynomial f. Note that there exists a natural one to one correspondence between vectors in V n and integers in f0 1 ::: 2 n ; 1g: This allows us to order all the vectors according to their corresponding integer values. For convenience, we use i to denote the vector in V n whose integer representation is i. Let f be a function on V n. The (1 ;1)-sequence (;1) f ( 0 ) (;1) f ( 1 ) ::: (;1) f ( 2n;1 ) is called the sequence of f(x). The function '(x 1 ::: x n )=a 1 x 1 a n x n c, a j, c 2 GF (2), is called an ane function, on V n, in particular, a linear function if c = 0. The sequence of an ane (a linear) function is called an ane sequence (a linear sequence). From [4] we can give an equivalent denition of bent functions. Let be the sequence of a function f on V n.we call f a bent function and a bent sequence, if the scalar product 1

h `i = 2 1 2 n for any linear sequence ` of length 2 n.obviously bent functions on V n exist only for even n. Consider all the (1 ;1)-sequences of length four: (+ + ++), (+ + ;;), (+ ; +;), (+ ;;+), (+ + +;), (+ + ;+), (+ ; ++), (; + ++), where + and ; denote 1 and ;1 respectively. Each of the rst eight is an ane sequence. For example, (; ++;) is the sequence '(x 1 x 2 )=1 x 1 x 2 : (;1) '(0 0) = ;1, (;1) '(0 1) =1,(;1) '(1 0) =1, (;1) '(1 1) = ;1. Note that a function on V 2 is bent if and only if it is quadratic. Thus each of the second eight is a bent sequence. For example, (; ;+;) is the sequence g(x 1 x 2 )= 1 x 1 x 1 x 2 :(;1) g(0 0) = ;1, (;1) g(0 1) = ;1, (;1) g(1 0) =1,(;1) g(1 1) = ;1. If a bent sequence of length 2 n is a concatenation of 2 n;2 bent (ane) sequences of length 4 we call it bent-based (linear-based) bent sequence. Adams and Tavares conjectured that any bent sequence is either bent-based or linear-based [1]. We nowprove that this conjecture is true if only if any bent function is quadratic. However there exist innitely many bent functions with algebraic degree higher than two [2], [4]. This implies that the conjecture is not true. The next lemma follows directly from the denition of bent-based (linear-based) bent sequences. Lemma 1 Let be the sequence ofabent function, f, onv n (n>2). Then is bent-based (linear-based) if and only if f(x 0 1 ::: x0 n;2 x n;1 x n ) is a bent (an ane) function on V 2 for any xed vector (x 0 1 ::: x0 n;2 ) 2 V n;2. Note that any function on V n can be written as f(x 1 ::: x n ) = r(x 1 ::: x n;2) p(x 1 ::: x n;2)x n;1 q(x 1 ::: x n;2)x n a(x 1 ::: x n;2)x n;1x n (1) where p, q, r and a are functions on V n;2. From Lemma 1, it is easy to verify Lemma 2 Let be the sequence ofabent function, f, onv n (n>2). Then is bent-based (linear-based) if and only if a(x 1 ::: x n;2) is the constant 1 (constant 0) in the expression for f in (1). Theorem 1 The conjecture of Adams and Tavares is true if only if every bent function is quadratic. Proof. Let be the sequence of an arbitrary bent function on V n (n>2), say f. Suppose any bent function is quadratic. It is easy to see that a(x 1 ::: x n;2) is constant in the expression for f as in (1). By Lemma 2, the conjecture is true. Conversely, suppose the conjecture is true i.e. is either bent-based or linear based. By Lemma 2, a(x 1 ::: x n;2) is constant in the expression for f as in (1). Suppose f is not 2

quadratic. Then there exist two distinct indices i and j such that the coecient of x i x j in the expression for f is not constant. Rewrite f(x 1 ::: x n )=g(x j1 ::: x jn;2 x i x j ), where j 1 ::: j n;2 is any permutation of f1 ::: ng;fi jg. Applying the conjecture to g leads a contradiction. ut References [1] C. M. Adams and S. E. Tavares. Generating and counting binary bent sequences. IEEE Transactions on Information Theory, IT-36 No. 5:1170{1173, 1990. [2] P. V. Kumar, R. A. Scholtz, and L. R. Welch. Generalized bent functions and their properties. Journal of Combinatorial Theory, Ser. A, 40:90{107, 1985. [3] F. J. MacWilliams and N. J. A. Sloane. The Theory of Error-Correcting Codes. New York: North-Holland, 1977. [4] O. S. Rothaus. On \bent" functions. Journal of Combinatorial Theory, Ser. A, 20:300{ 305, 1976. 3