English

A Note on the Walsh Spectrum of Power Residue S-Boxes

Number Theory 2025-10-14 v2 Cryptography and Security

Abstract

Let Fq\mathbb{F}_q be a prime field with q3q \geq 3, and let d,m1d, m \geq 1 be integers such that gcd(d,q)=1\gcd \left( d, q \right) = 1 and m(q1)m \mid (q - 1). In this paper we bound the absolute values of the Walsh spectrum of S-Boxes S(x)=xdT(xq1m)S (x) = x^d \cdot T \left( x^\frac{q - 1}{m} \right), where TT is a function with T(x)0T (x) \neq 0 if x0x \neq 0. Such S-Boxes have been proposed for the Zero-Knowledge-friendly hash functions Grendel and Polocolo. In particular, we prove the conjectured correlation of the Polocolo S-Box.

Keywords

Cite

@article{arxiv.2507.06808,
  title  = {A Note on the Walsh Spectrum of Power Residue S-Boxes},
  author = {Matthias Johann Steiner},
  journal= {arXiv preprint arXiv:2507.06808},
  year   = {2025}
}