On CCZ-equivalence of the inverse function
Abstract
The inverse function $x \mapsto x^{-1}$ on $\mathbb{F}_{2^n}$ is one of the most studied functions in cryptography due to its widespread use as an S-box in block ciphers like AES. In this paper, we show that, if $n\geq 5$, every function that is CCZ-equivalent to the inverse function is already EA-equivalent to it. This confirms a conjecture by Budaghyan, Calderini and Villa. We also prove that every permutation that is CCZ-equivalent to the inverse function is already affine equivalent to it. The majority of the paper is devoted to proving that there are no permutation polynomials of the form $L_1(x^{-1})+L_2(x)$ over $\mathbb{F}_{2^n}$ if $n\geq 5$, where $L_1,L_2$ are nonzero linear functions. In the proof, we combine Kloosterman sums, quadratic forms and tools from additive combinatorics.
- Publication:
-
arXiv e-prints
- Pub Date:
- August 2020
- DOI:
- 10.48550/arXiv.2008.08398
- arXiv:
- arXiv:2008.08398
- Bibcode:
- 2020arXiv200808398K
- Keywords:
-
- Computer Science - Information Theory;
- Mathematics - Combinatorics;
- Mathematics - Number Theory
- E-Print:
- Includes reviewers' comments, in particular an improved introduction, and corrected some typos. Accepted for publication in IEEE Transactions on Information Theory