English

An infinite family of 0-APN monomials with two parameters

Number Theory 2023-04-10 v2 Cryptography and Security

Abstract

We consider an infinite family of exponents e(l,k)e(l,k) with two parameters, ll and kk, and derive sufficient conditions for e(l,k)e(l,k) to be 0-APN over F2n\mathbb{F}_{2^n}. These conditions allow us to generate, for each choice of ll and kk, an infinite list of dimensions nn where xe(l,k)x^{e(l,k)} is 0-APN much more efficiently than in general. We observe that the Gold and Inverse exponents, as well as the inverses of the Gold exponents can be expressed in the form e(l,k)e(l,k) for suitable ll and kk. We characterize all cases in which e(l,k)e(l,k) can be cyclotomic equivalent to a representative from the Gold, Kasami, Welch, Niho, and Inverse families of exponents. We characterize when e(l,k)e(l,k) can lie in the same cyclotomic coset as the Dobbertin exponent (without considering inverses) and provide computational data showing that the Dobbertin inverse is never equivalent to e(l,k)e(l,k). We computationally test the APN-ness of e(l,k)e(l,k) for small values of ll and kk over F2n\mathbb{F}_{2^n} for n100n \le 100, and sketch the limits to which such tests can be performed using currently available technology. We conclude that there are no APN monomials among the tested functions, outside of known classes.

Keywords

Cite

@article{arxiv.2211.13485,
  title  = {An infinite family of 0-APN monomials with two parameters},
  author = {Nikolay Kaleyski and Kjetil Nesheim and Patenlimon Stănică},
  journal= {arXiv preprint arXiv:2211.13485},
  year   = {2023}
}