arXiv++ Combinatorics

We say an $(n,n)$-function $F \colon \mathbb{F}_2^n \to \mathbb{F}_2^n$ is a crooked function if for any nonzero $a \in \mathbb{F}_2^n$, the image of $D_aF(x)=F(x)+F(x+a)$ is an affine hyperplane. The only known examples of crooked functions are all quadratic almost perfect nonlinear (APN), or equivalently, for every known crooked function, $D_aF$ is affine for all $a \in \mathbb{F}_2^n$. The ortho-derivative $π_F \colon\mathbb{F}_2^n \to \mathbb{F}_2^n$ of a crooked function $F$ is the function such that $π_F(0)=0$, and for any nonzero $a$, the set $\{0,π_F(a)\}^\perp$ is the underlying vector space of $\mathrm{Im}(D_aF)$. We prove that for $n \geq 4$ and a crooked function $F$, if $k$ is a non-negative integer such that $F$ has $2^k$ quadratic component functions, $π_F$ has at least $2^n-2^{n-k}$ nonzero components of algebraic degree $n-2$. In particular, we resolve Gorodilova's conjecture that every nonzero component of $π_F$ has algebraic degree $n-2$ when $F$ is quadratic APN. As a corollary, we prove that for any even $n \geq 4$, any crooked $(n,n)$-function with at least one quadratic component has at least $5$ semi-bent components. As a second main result, for $n \geq 4$, we associate to a crooked function $F$ a quadratic function $\varepsilon_F \colon \mathbb{F}_2^n \to \mathbb{F}_2^n$ that satisfies a strong geometric-combinatorial condition regarding the sums of $F$ over $2$-dimensional linear subspaces. Furthermore, we obtain a congruence result on a problem on $m$-sequences introduced by Johansen, Helleseth, and Kholosha, and we determine the exact algebraic degrees of some Boolean functions associated to the bent and near-bent components of particular classes of plateaued vectorial functions.

We study a conjecture on the Kasami almost perfect nonlinear (APN) function $F(x)=x^{4^k-2^k+1}$ on $GF(2^n)$, $\gcd(k,n)=1$: for the $2^{n-1}$-element set $Δ=\{F(b)+F(b+1)+1: b\in GF(2^n)\}$ and all distinct nonzero $v_1,v_2\in GF(2^n)$, \[ \bigl|\{(x,y,z)\inΔ^3 : v_1x+v_2y+(v_1+v_2)z=0\}\bigr| \;=\; 2^{2n-3}. \] The conjecture was proposed at the NSUCRYPTO~2019 cryptographic olympiad (the proposer of the problem was not publicly disclosed). We prove the conjecture for $k\bmod n\in\{1,2,n-2,n-1\}$, in particular a complete proof for $k=2$ ($d=13$) via a quadratic-form theory and an exact root-count reduction, and we verify it exhaustively by computer for every admissible $(n,k)$ with $n\le13$.

We completely classify a natural scalar trace-product switching of the Gold almost perfect nonlinear function $x\mapsto x^3$ in every even dimension. Nontrivial switchings occur only for $n=4,6,8$: the admissible coefficients are, respectively, the nonzero trace-zero elements, the six elements of multiplicative order nine, and $\mathbb{F}_4^{*}$. For every even $n\geq10$, no nonzero coefficient is admissible. The infinite range is excluded by additive-character estimates on a Fermat cubic, with exact finite bridges for $n=10,12$. The raw coefficient lists for $n=6,8$ appeared earlier in Arshad's dissertation; our contribution is their intrinsic description, a proof uniform in the dimension, and the resulting dimension-rigidity theorem. We also classify normalized rank-two extensions in dimension eight by $\mathbb{P}^{1}(\mathbb{F}_4)$. A binary trace selector accepts two coefficient values at each non-base projective point, and the eight accepted marked switchings form exactly two extended-affine, hence two CCZ, classes. A centre-independent low-rank derivative criterion reduces each rank-$r$ candidate to $2^r-1$ membership tests in precomputed forbidden sets. The global APN classes reached are known; the results describe their local organization around the Gold centre and rule out this switching mechanism in all larger even dimensions.

We describe a computational search for quadratic APN (Almost Perfect Nonlinear) functions in dimension 8 within a structured self-equivalence subspace. The search space is a 40-dimensional binary linear subspace consisting of all functions commuting with a linear automorphism of order 5 (class 22 in the taxonomy of Beierle, Brinkmann, and Leander, 2021), previously reported to contain no APN functions. Our approach combines random sampling via an explicit RREF parameterization (approximately 600 fresh APN-positive evaluations per core-hour) with Gröbner basis computation in Magma to enumerate all APN functions in a 24-dimensional hyperplane through each center (approximately 10 minutes per hyperplane). From 428 hyperplane computations, covering 0.65% of all 65,536 hyperplanes, we obtained 566 quadratic APN functions forming six CCZ-equivalence classes under the ortho-derivative invariant. Four classes, comprising 500 functions, match no entry in the 2025 database of 3,775,599 quadratic APN functions or in the pre-2020 compilation of 12,921 instances. Two classes (66 functions) are CCZ-equivalent to the Gold functions x^3 and x^9, confirming the correctness of the search pipeline. A membership analysis shows that the three new classes (B, C, D) lie entirely outside the original subspace and occur only in Gold-centered slices, demonstrating the essential role of the Gröbner basis stage. In 532 experiments using database functions as slice centers and 20 experiments with random centers, no APN neighbors were found, indicating that the gateway phenomenon is specific to the self-equivalence structure of the search space. Since the ortho-derivative invariant is a complete CCZ-invariant for quadratic APN functions, the absence of matching signatures provides a rigorous proof of CCZ-inequivalence.

We give a large family of almost perfect nonlinear (APN) permutations of finite vector spaces of every odd dimension divisible by three. We also give APN functions that are not bijective on even dimensions and related highly nonlinear functions. The functions we provide admit a so-called triprojective structure induced by the general linear group $\mathrm{GL}(3,2^m)$.

In this paper we explore a connection between certain Almost Perfect Nonlinear Functions (APN functions) and relative difference sets. In particular, we show that the image set of certain 2-to-1 APN functions is a relative difference set. Through a result of Pott this further provides a connection between APN functions and bent functions.

The only known example of an almost perfect nonlinear (APN) permutation in even dimension was obtained by applying CCZ-equivalence to a specific quadratic APN function. Motivated by this result, there have been numerous recent attempts to construct new quadratic APN functions. Currently, 32,892 quadratic APN functions in dimension 8 are known and two recent conjectures address their possible total number. The first, proposed by Y. Yu and L. Perrin (Cryptogr. Commun. 14(6): 1359-1369, 2022), suggests that there are more than 50,000 such functions. The second, by A. Polujan and A. Pott (Proc. 7th Int. Workshop on Boolean Functions and Their Applications, 2022), argues that their number exceeds that of inequivalent quadratic (8,4)-bent functions, which is 92,515. We computationally construct 3,775,599 inequivalent quadratic APN functions in dimension 8 and estimate the total number to be about 6 million.

A Sidon set $S$ in $\mathbb{F}_2^n$ is a set such that $x+y=z+w$ has no solutions $x,y,z,w \in S$ with $x,y,z,w$ all distinct. In this paper, we prove various results on Sidon sets by using or generalizing known cryptographic results. In particular, we generalize known results on the Walsh transform of almost perfect nonlinear (APN) functions to Sidon sets. One such result is that we classify Sidon sets with minimal linearity as those that are $k$-covers. That is, Sidon sets with minimal linearity are those Sidon sets $S \subseteq \mathbb{F}_2^n$ such that there exists $k > 0$ such that for any $p \in \mathbb{F}_2^n \setminus S$, there are exactly $k$ subsets $\{x,y,z\} \subseteq S$ such that $x+y+z = p$. From this, we also classify $k$-covers by means of the Cayley graph of a particular Boolean function, and we construct the unique rank $3$ strongly regular graph with parameters $(2048, 276, 44, 36)$ as the Cayley graph of a Boolean function. Finally, by computing the linearity of a particular family of Sidon sets, we increase the best-known lower bound of the largest Sidon set in $\mathbb{F}_2^{4t+1}$ by $1$ for all $t \geq 4$.

In this article, we study algebraic decompositions and secondary constructions of almost perfect nonlinear (APN) functions. In many cases, we establish precise criteria which characterize when certain modifications of a given APN function yield new ones. Furthermore, we show that some of the newly constructed functions are extended-affine inequivalent to the original ones.

A Sidon set $M$ is a subset of $\mathbb{F}_2^t$ such that the sum of four distinct elements of $M$ is never 0. The goal is to find Sidon sets of large size. In this note we show that the graphs of almost perfect nonlinear (APN) functions with high linearity can be used to construct large Sidon sets. Thanks to recently constructed APN functions $\mathbb{F}_2^8\to \mathbb{F}_2^8$ with high linearity, we can construct Sidon sets of size 192 in $\mathbb{F}_2^{15}$, where the largest sets so far had size 152. Using the inverse and the Dobbertin function also gives larger Sidon sets as previously known. Each of the new large Sidon sets $M$ in $\mathbb{F}_2^t$ yields a binary linear code with $t$ check bits, minimum distance 5, and a length not known so far. Moreover, we improve the upper bound for the linearity of arbitrary APN functions.

Finding functions, particularly permutations, with good differential properties has received a lot of attention due to their varied applications. For instance, in combinatorial design theory, a correspondence of perfect $c$-nonlinear functions and difference sets in some quasigroups was recently shown by Anbar et al. (J. Comb. Des. 31(12):1-24, 2023). Additionally, in a recent manuscript by Pal et al. (Adv. Math. Communications, to appear), a very interesting connection between the $c$-differential uniformity and boomerang uniformity, when $c=-1$, was pointed out, showing that they are the same for an odd APN permutation, sparking yet more interest in the construction of functions with low $c$-differential uniformity. We investigate the $c$-differential uniformity of some classes of permutation polynomials. As a result, we add four more classes of permutation polynomials to the family of functions that only contains a few (non-trivial) perfect $c$-nonlinear functions over finite fields of even characteristic. Moreover, we include a class of permutation polynomials with low $c$-differential uniformity over the field of characteristic~$3$. To solve the involved equations over finite fields, we use various number theoretical techniques, in particular, we find explicitly many Walsh transform coefficients and Weil sums that may be of an independent interest.

Let $F$ be a finite field, let $f$ be a function from $F$ to $F$, and let $a$ be a nonzero element of $F$. The discrete derivative of $f$ in direction $a$ is $Δ_a f \colon F \to F$ with $(Δ_a f)(x)=f(x+a)-f(x)$. The differential spectrum of $f$ is the multiset of cardinalities of all the fibers of all the derivatives $Δ_a f$ as $a$ runs through $F^*$. An almost perfect nonlinear (APN) function is one for which the largest cardinality in its differential spectrum is $2$. Almost perfect nonlinear functions are of interest as cryptographic primitives. If $d$ is a positive integer, then the power function over $F$ with exponent $d$ is the function $f \colon F \to F$ with $f(x)=x^d$ for every $x \in F$. There is a small number of known infinite families of APN power functions. In this paper, we re-express the exponents for one such family in a more convenient form. This enables us not only to obtain the differential spectrum of each power function $f$ with an exponent in our family, but also to determine the elements that lie in an arbitrary fiber of the discrete derivative of $f$. This differential analysis, which is far more detailed than previous results, is achieved by composing the discrete derivative of $f$ with some permutations and a double covering of its domain to obtain a function whose fibers can more readily be analyzed.

In this paper, we study the value distributions of perfect nonlinear functions, i.e., we investigate the sizes of image and preimage sets. Using purely combinatorial tools, we develop a framework that deals with perfect nonlinear functions in the most general setting, generalizing several results that were achieved under specific constraints. For the particularly interesting elementary abelian case, we derive several new strong conditions and classification results on the value distributions. Moreover, we show that most of the classical constructions of perfect nonlinear functions have very specific value distributions, in the sense that they are almost balanced. Consequently, we completely determine the possible value distributions of vectorial Boolean bent functions with output dimension at most 4. Finally, using the discrete Fourier transform, we show that in some cases value distributions can be used to determine whether a given function is perfect nonlinear, or to decide whether given perfect nonlinear functions are equivalent.

We investigate pairs of permutations $F,G$ of $\mathbb{F}_{p^n}$ such that $F(x+a)-G(x)$ is a permutation for every $a\in\mathbb{F}_{p^n}$. We show that necessarily $G(x) = \wp(F(x))$ for some complete mapping $-\wp$ of $\mathbb{F}_{p^n}$, and call the permutation $F$ a perfect $\wp$ nonlinear (P$\wp$N) function. If $\wp(x) = cx$, then $F$ is a PcN function, which have been considered in the literature, lately. With a binary operation on $\mathbb{F}_{p^n}\times\mathbb{F}_{p^n}$ involving $\wp$, we obtain a quasigroup, and show that the graph of a P$\wp$N function $F$ is a difference set in the respective quasigroup. We further point to variants of symmetric designs obtained from such quasigroup difference sets. Finally, we analyze an equivalence (naturally defined via the automorphism group of the respective quasigroup) for P$\wp$N functions, respectively, the difference sets in the corresponding quasigroup.

The concept of differential uniformity was recently extended to the $c$-differential uniformity. An interesting problem in this area is the construction of functions with low $c$-differential uniformity and a lot of research has been done in this direction in the recent past. Here, we present three classes of (almost) perfect $c$-nonlinear permutations over finite fields of even characteristic.

Let $p>3$ be a prime. We show that, for each integer $d$ with $p \leq d \leq 2(p-1)$, there exists a generalized almost perfect nonlinear (GAPN) binomial or trinomial over $\mathbb{F}_{p^2}$ of algebraic degree $d$. We start by deriving sufficient conditions for the function $G \colon \mathbb{F}_{p^2} \rightarrow \mathbb{F}_{p^2}, X \mapsto X^{d_1} + u X^{d_2}$ to be GAPN in the case where one of the terms of $G$ is GAPN. We then give explicit constructions of GAPN binomials over $\mathbb{F}_{p^2}$ of any odd algebraic degree between $p$ and $2(p-1)$ and, in the case where $p$ is not a Mersenne prime, also of any even algebraic degree in this range. To obtain GAPN functions of even algebraic degree also in the general case, we finally show how to construct GAPN trinomials over $\mathbb{F}_{p^2}$ of any even algebraic degree between $p$ and $2(p-1)$ by applying a characterization of a special form of GAPN binomials by Özbudak and Sălăgean. Our constructed functions are the first GAPN functions of even algebraic degree over extension fields of odd characteristic reported so far.

In this paper, we classify $(q,q)$-biprojective almost perfect nonlinear (APN) functions over $\mathbb{LL} \times \mathbb{LL}$ under the natural left and right action of $\mathrm{GL}(2,\mathbb{LL})$ where $\mathbb{LL}$ is a finite field of characteristic $2$. This shows in particular that the only quadratic APN functions (up to CCZ-equivalence) over $\mathbb{LL} \times \mathbb{LL}$ that satisfy the so-called subfield property are the Gold functions and the function $κ: \mathbb{F}_{64} \to \mathbb{F}_{64}$ which is the only known APN function that is equivalent to a permutation over $\mathbb{LL} \times \mathbb{LL}$ up to CCZ-equivalence. The $κ$-function was introduced in (Browning, Dillon, McQuistan, and Wolfe, 2010). Deciding whether there exist other quadratic APN functions (possibly CCZ-equivalent to permutations) that satisfy subfield property or equivalently, generalizing $κ$ to higher dimensions was an open problem listed for instance in (Carlet, 2015) as one of the interesting open problems on cryptographic functions.

Two important problems on almost perfect nonlinear (APN) functions are the enumeration and equivalence problems. In this paper, we solve these two problems for any biprojective APN function family by introducing a strong group theoretic method for those functions. Roughly half of the known APN families of functions on even dimensions are biprojective. By our method, we settle the equivalence problem for all known biprojective APN functions. Furthermore, we give a new family of biprojective APN functions. Using our method, we count the number of inequivalent APN functions in all known biprojective APN families and show that the new family found in this paper gives exponentially many new inequivalent APN functions. Quite recently, the Taniguchi family of APN functions was shown to contain an exponential number of inequivalent APN functions by Kaspers and Zhou (J. Cryptol. 34 (1), 2021) which improved their previous count (J. Comb. Th. A 186, 2022) for the Zhou-Pott family. Our group theoretic method substantially simplifies the work required for proving those results and provides a generic natural method for every family in the large super-class of biprojective APN functions that contains these two family along with many others.

Finding permutation polynomials with low differential and boomerang uniformityis an important topic in S-box designs of many block ciphers. For example, AES chooses the inverse function as its S-box, which is differentially 4-uniform and boomerang 6-uniform. Also there has been considerable research on many non-quadratic permutations which are obtained by modifying certain set of points from the inverse function. In this paper, we give a novel approach that shows that plenty of existing modifications of the inverse function are in fact affine equivalent to permutations of low Carlitz rank and those modifications cannot be APN (almost perfect nonlinear) unless the Carlitz rank is very large. Using nice properties of the permutations of Carlitz form, we present the complete list of permutations of Carlitz rank 3 having the boomerang uniformity six, and also give the complete classification of the differential uniformity of permutations of Carlitz rank 3. We also provide, up to affine equivalence, all the involutory permutations of Carlitz rank 3 having the boomerang uniformity six.

Functions with low differential uniformity have relevant applications in cryptography. Recently, functions with low $c$-differential uniformity attracted lots of attention. In particular, so-called APcN and PcN functions (generalization of APN and PN functions) have been investigated. Here, we provide a characterization of such functions via quadratic polynomials as well as non-existence results.