English

On the image of an affine subspace under the inverse function within a finite field

Cryptography and Security 2022-07-01 v1 Number Theory

Abstract

We consider the function x1x^{-1} that inverses a finite field element xFpnx \in \mathbb{F}_{p^n} (pp is prime, 01=00^{-1} = 0) and affine Fp\mathbb{F}_{p}-subspaces of Fpn\mathbb{F}_{p^n} such that their images are affine subspaces as well. It is proven that the image of an affine subspace LL, L>2|L| > 2, is an affine subspace if and only if L=qFpkL = q \mathbb{F}_{p^k}, where qFpnq \in \mathbb{F}_{p^n}^{*} and knk \mid n. In other words, it is either a subfield of Fpn\mathbb{F}_{p^n} or a subspace consisting of all elements of a subfield multiplied by qq. This generalizes the results that were obtained for linear invariant subspaces in 2006. As a consequence, we propose a sufficient condition providing that a function A(x1)+bA(x^{-1}) + b has no invariant affine subspaces UU of cardinality 2<U<pn2 < |U| < p^n for an invertible linear transformation A:FpnFpnA: \mathbb{F}_{p^n} \to \mathbb{F}_{p^n} and bFpnb \in \mathbb{F}_{p^n}^{*}. As an example, it is shown that the condition works for S-box of AES. Also, we demonstrate that some functions of the form αx1+b\alpha x^{-1} + b have no invariant affine subspaces except for Fpn\mathbb{F}_{p^n}, where α,bFpn\alpha, b \in \mathbb{F}_{p^n}^{*} and nn is arbitrary.

Keywords

Cite

@article{arxiv.2206.14980,
  title  = {On the image of an affine subspace under the inverse function within a finite field},
  author = {Nikolay Kolomeec and Denis Bykov},
  journal= {arXiv preprint arXiv:2206.14980},
  year   = {2022}
}