arXiv++ Combinatorics

The only known example of an almost perfect nonlinear (APN) permutation in even dimension was obtained by applying CCZ-equivalence to a specific quadratic APN function. Motivated by this result, there have been numerous recent attempts to construct new quadratic APN functions. Currently, 32,892 quadratic APN functions in dimension 8 are known and two recent conjectures address their possible total number. The first, proposed by Y. Yu and L. Perrin (Cryptogr. Commun. 14(6): 1359-1369, 2022), suggests that there are more than 50,000 such functions. The second, by A. Polujan and A. Pott (Proc. 7th Int. Workshop on Boolean Functions and Their Applications, 2022), argues that their number exceeds that of inequivalent quadratic (8,4)-bent functions, which is 92,515. We computationally construct 3,775,599 inequivalent quadratic APN functions in dimension 8 and estimate the total number to be about 6 million.

We consider Weil sums of binomials of the form $W_{F,d}(a)=\sum_{x \in F} ψ(x^d-a x)$, where $F$ is a finite field, $ψ\colon F\to {\mathbb C}$ is the canonical additive character, $\gcd(d,|F^\times|)=1$, and $a \in F^\times$. If we fix $F$ and $d$ and examine the values of $W_{F,d}(a)$ as $a$ runs through $F^\times$, we always obtain at least three distinct values unless $d$ is degenerate (a power of the characteristic of $F$ modulo $|F^\times|$). Choices of $F$ and $d$ for which we obtain only three values are quite rare and desirable in a wide variety of applications. We show that if $F$ is a field of order $3^n$ with $n$ odd, and $d=3^r+2$ with $4 r \equiv 1 \pmod{n}$, then $W_{F,d}(a)$ assumes only the three values $0$ and $\pm 3^{(n+1)/2}$. This proves the 2001 conjecture of Dobbertin, Helleseth, Kumar, and Martinsen. The proof employs diverse methods involving trilinear forms, counting points on curves via multiplicative character sums, divisibility properties of Gauss sums, and graph theory.

The Weil sum $W_{K,d}(a)=\sum_{x \in K} ψ(x^d + a x)$ where $K$ is a finite field, $ψ$ is an additive character of $K$, $d$ is coprime to $|K^\times|$, and $a \in K^\times$ arises often in number-theoretic calculations, and in applications to finite geometry, cryptography, digital sequence design, and coding theory. Researchers are especially interested in the case where $W_{K,d}(a)$ assumes three distinct values as $a$ runs through $K^\times$. A Galois-theoretic approach, combined with $p$-divisibility results on Gauss sums, is used here to prove a variety of new results that constrain which fields $K$ and exponents $d$ support three-valued Weil sums, and restrict the values that such Weil sums may assume.