<p>We investigate shift-invariant transformations, also known as rotation-symmetric vectorial Boolean functions, on <i>n</i>&#xa0;bits that are induced from Boolean functions on <i>k</i>&#xa0;bits, for <InlineEquation ID="IEq1"> <EquationSource Format="TEX">\(k\le n\)</EquationSource> </InlineEquation>. We consider such transformations that are not necessarily permutations, but are, in some sense, almost bijective, and study their cryptographic properties. In this context, we define an almost lifting as a Boolean function for which there is an upper bound on the number of collisions of its induced transformation that does not depend on <i>n</i>. We show that if a Boolean function with diameter <i>k</i> is an almost lifting, then the maximum number of collisions of its induced transformation is <InlineEquation ID="IEq2"> <EquationSource Format="TEX">\(2^{k-1}\)</EquationSource> </InlineEquation> for any <i>n</i>. Moreover, we search for functions in the class of almost liftings that have good cryptographic properties and for which the non-bijectivity does not cause major security weaknesses. These functions generalize the well-known map <InlineEquation ID="IEq3"> <EquationSource Format="TEX">\(\chi\)</EquationSource> </InlineEquation> used in the Keccak hash function.</p>

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Shift-invariant transformations and almost liftings

  • Jan Kristian Haugland,
  • Tron Omland

摘要

We investigate shift-invariant transformations, also known as rotation-symmetric vectorial Boolean functions, on n bits that are induced from Boolean functions on k bits, for \(k\le n\) . We consider such transformations that are not necessarily permutations, but are, in some sense, almost bijective, and study their cryptographic properties. In this context, we define an almost lifting as a Boolean function for which there is an upper bound on the number of collisions of its induced transformation that does not depend on n. We show that if a Boolean function with diameter k is an almost lifting, then the maximum number of collisions of its induced transformation is \(2^{k-1}\) for any n. Moreover, we search for functions in the class of almost liftings that have good cryptographic properties and for which the non-bijectivity does not cause major security weaknesses. These functions generalize the well-known map \(\chi\) used in the Keccak hash function.