Linear weaknesses in t-functions

Tao Shi,Vladimir Anashin,Dongdai Lin

DOI: https://doi.org/10.1007/978-3-642-30615-0_26

2012-01-01

Abstract:We find linear (as well as quadratic) relations in a very large class of T-functions. The relations may be used in analysis of T-function-based stream ciphers.

What problem does this paper attempt to address?

Linear Relation on General Ergodic T-Function

Tao Shi,Vladimir Anashin,Dongdai Lin

2011-01-01

Abstract: We find linear (as well as quadratic) relations in a very large class of T-functions. The relations may be used in analysis of T-function-based stream ciphers.
Non-Archimedean analysis, T-functions, and cryptography

Vladimir Anashin

DOI: https://doi.org/10.48550/arXiv.cs/0612038

2006-12-06

Cryptography and Security

Abstract:These are lecture notes of a 20-hour course at the International Summer School \emph{Mathematical Methods and Technologies in Computer Security} at Lomonosov Moscow State University, July 9--23, 2006. Loosely speaking, a $T$-function is a map of $n$-bit words into $n$-bit words such that each $i$-th bit of image depends only on low-order bits $0,..., i$ of the pre-image. For example, all arithmetic operations (addition, multiplication) are $T$-functions, all bitwise logical operations ($\XOR$, $\AND$, etc.) are $T$-functions. Any composition of $T$-functions is a $T$-function as well. Thus $T$-functions are natural computer word-oriented functions. It turns out that $T$-functions are continuous (and often differentiable!) functions with respect to the so-called 2-adic distance. This observation gives a powerful tool to apply 2-adic analysis to construct wide classes of $T$-functions with provable cryptographic properties (long period, balance, uniform distribution, high linear complexity, etc.); these functions currently are being used in new generation of fast stream ciphers. We consider these ciphers as specific automata that could be associated to dynamical systems on the space of 2-adic integers. From this view the lectures could be considered as a course in cryptographic applications of the non-Archimedean dynamics; the latter has recently attracted significant attention in connection with applications to physics, biology and cognitive sciences. During the course listeners study non-Archimedean machinery and its applications to stream cipher design.
Fast Linear Subspace Attacks on Stream Ciphers

Guang Gong,Sondre Rønjom,Tor Helleseth,Honggang Hu

2009-01-01

Abstract:In this paper we present some new results on the linear subspace attack, introduced first in (21) and developed further in (22),(24),(23) and (25). The focal point of this paper is to fill some gaps in the theory of analysis in terms of linear subspaces. We first analyse a special case of the linear subspace method which the previously introduced algorithm does not account for. We then proceed by introducing fast selective linear subspace attacks( or fast linear subspace attacks), which is closely related to the fast algebraic attacks found in literature. But in contrast to the classical view that successful algebraic cryptanalysis of LFSR-based stream cipher depends on the degree of certain annihilators, we show that analysis in terms of the spectral properties of the sequences generated by these functions is far more refined. It is shown that the fast linear subspace attack is more ecient than known methods for the case when the number of observed consecutive bits of a filtering or combinatorial sequence is less than the linear span of the sequence. Thus, by utilizing the natural representation imposed by the underlying LFSRs, we show in general that analysis in terms of linear subspaces is more ecient and has more flexibility than classical and fast algebraic
Some Results on Fast Algebraic Attacks and Higher-Order Non-Linearities.

Q. Wang,T. Johansson,H. Kan

DOI: https://doi.org/10.1049/iet-ifs.2011.0090

2012-01-01

IET Information Security

Abstract:In this study, the authors investigate the resistance of Boolean functions against fast algebraic attacks and deduce a bound between fast algebraic immunity and higher-order non-linearity (it is the first time that a bound between these two cryptographic criteria is given). The authors then show that the fast algebraic immunity of the following two classes of Boolean functions is not good: (a) The repaired functions of the Tu-Deng function proposed by Carlet. The Tu-Deng function has optimum algebraic degree, optimum algebraic immunity and a very good non-linearity. However, it is weak against fast algebraic attacks. Carlet found this weakness and also tried to repair it. (b) An infinite class of balanced functions proposed by Tang et al. , having optimum algebraic degree, optimum algebraic immunity and a very high non-linearity.
The New Implementation Schemes of the TTM Cryptosystem Are Not Secure

Jintai Ding,Dieter Schmidt

DOI: https://doi.org/10.1007/978-3-0348-7865-4_6

2004-01-01

Abstract: We show that the new TTM implementation schemes have a defect. There exist linearization equations åi = 1,j = 1n,m aijxiyj(x1, ¼,xn) + åi = 1n bixi + åj = 1m cjyj(x1, ¼,xn) + d = 0,\sum\limits_{i = 1,j = 1}^{n,m} {{a_{ij}}{x_i}{y_j}({x_1}, \ldots ,{x_n}) + \sum\limits_{i = 1}^n {{b_i}{x_i} + \sum\limits_{j = 1}^m {{c_j}{y_j}({x_1}, \ldots ,{x_n}) + d = 0,} } } which are satisfied by the components y3 (x1 … xn) of the ciphers of the TTM schemes. The inventor of TTM used two versions of the paper [2] to refute a claim in [3]. When we do a linear substitution with the linear equations derived from the linearization equations for a given ciphertext,we can find the plaintext by an iteration of the procedure of first search for linear equations by linear combinations and then linear substitution. The computational complexity of the attack on these two schemes is less than 235 over a finite field of size 28.
Compact Lossy and All-but-One Trapdoor Functions from Lattice

Leixiao Cheng,Quanshui Wu,Yunlei Zhao

DOI: https://doi.org/10.1007/978-3-319-72359-4_16

2017-01-01

Abstract:Lossy trapdoor functions (LTDF) and all-but-one trapdoor functions (ABO-TDF) are fundamental cryptographic primitives. And given the recent advances in quantum computing, it would be much desirable to develop new and improved lattice-based LTDF and ABO-TDF. In this work, we provide more compact constructions of LTDF and ABO-TDF based on the learning with errors (LWE) problem. In addition, our LWE-based ABO-TDF can allow smaller system parameters to support super-polynomially many injective branches in the construction of CCA secure public key encryption. As a core building tool, we provide a more compact homomorphic symmetric encryption schemes based on LWE, which might be of independent interest. To further optimize the ABO-TDF construction, we employ the full rank difference encoding technique. As a consequence, the results presented in this work can substantially improve the performance of all the previous LWE-based cryptographic constructions based upon LTDF and ABO-TDF.
An Infinite Class of Balanced Functions with Optimal Algebraic Immunity, Good Immunity to Fast Algebraic Attacks and Good Nonlinearity

Claude Carlet,Keqin Feng

DOI: https://doi.org/10.1007/978-3-540-89255-7_26

2008-01-01

Abstract:After the improvement by Courtois and Meier of the algebraic attacks on stream ciphers and the introduction of the related notion of algebraic immunity, several constructions of infinite classes of Boolean functions with optimum algebraic immunity have been proposed. All of them gave functions whose algebraic degrees are high enough for resisting the Berlekamp-Massey attack and the recent Rønjom-Helleseth attack, but whose nonlinearities either achieve the worst possible value (given by Lobanov's bound) or are slightly superior to it. Hence, these functions do not allow resistance to fast correlation attacks. Moreover, they do not behave well with respect to fast algebraic attacks. In this paper, we study an infinite class of functions which achieve an optimum algebraic immunity. We prove that they have an optimum algebraic degree and a much better nonlinearity than all the previously obtained infinite classes of functions. We check that, at least for small values of the number of variables, the functions of this class have in fact a very good nonlinearity and also a good behavior against fast algebraic attacks.
Combinatorial t-designs from special functions

Cunsheng Ding,Chunming Tang

DOI: https://doi.org/10.1007/s12095-020-00442-2

2020-06-18

Cryptography and Communications

Abstract:A special function is a function either of special form or with a special property. Special functions have interesting applications in coding theory and combinatorial t-designs. The main objective of this paper is to survey t-designs constructed from special functions, including quadratic functions, almost perfect nonlinear functions, almost bent functions, bent functions, bent vectorial functions, and planar functions. These combinatorial designs are not constructed directly from such functions, but come from linear codes which are constructed with such functions. As a byproduct, this paper also surveys linear codes from certain special functions.
New Insights on Linear Cryptanalysis.

Zhiqiang Liu,Shuai Han,Qingju Wang,Wei Li,Ya Liu,Dawu Gu

DOI: https://doi.org/10.1007/s11432-018-9758-4

2019-01-01

Science China Information Sciences

Abstract:Linear cryptanalysis is one of the most important cryptanalytic tools against block ciphers, thus modern block ciphers are always deliberately devised to avoid good long linear characteristics so as to resist linear cryptanalysis and its extensions. Differential-linear cryptanalysis, a powerful extension of linear cryptanalysis, has drawn much attention due to its applicability even in certain case that there is no good long linear characteristic of block ciphers. To further refine differential-linear cryptanalysis, we investigate the correlation distribution of differential-linear hull over random permutation and derive a concrete and concise correlation distribution accordingly. Theoretically, this could make differential-linear cryptanalysis more reasonable and precise. Moreover, the newly-proposed correlation distribution could lead to an interesting potential for improving the effectiveness of differential-linear cryptanalysis.
A Local Tb Theorem for Square Functions and Parabolic Layer Potentials

Zhi Dan Wang,Guo Ming Zhang

DOI: https://doi.org/10.1007/s10114-024-2576-5

2024-05-21

Acta Mathematica Sinica English Series

Abstract:In this paper, we give a locally parabolic version of Tb theorem for a class of vector-valued operators with off-diagonal decay in L 2 and certain quasi-orthogonality on a subspace of L 2 , in which the testing functions themselves are also vector-valued. As an application, we establish the boundedness of layer potentials related to parabolic operators in divergence form, defined in the upper half-space R n +2 + ≔ {( x , t , λ ) ∈ R n +1 × (0, ∞)}, with uniformly complex elliptic, L ∞ , t , λ -independent coefficients, and satisfying the De Giorgi/Nash estimates.

mathematics, applied
Cryptanalysis of Two New Instances of TTM Cryptosystem.

Xuyun Nie,Xin Jiang,Lei Hu,Jintai Ding

2007-01-01

Abstract:In 2006, Nie et al proposed an attack to break an instance of TTM cryptosystems. However, the inventor of TTM disputed this attack and he proposed two new instances of TTM to support his viewpoint. At this time, he did not give the detail of key construction — the construction of the lock polynomials in these instances which would be used in decryption. The two instances are claimed to achieve a security of 2 against Nie et al attack. In this paper, we show that these instances are both still insecure, and in fact, they do not achieve a better design in the sense that we can find a ciphertext-only attack utilizing the First Order Linearization Equations while for the previous version of TTM, only Second Order Linearization Equations can be used in the beginning stage of the previous attack. Different from previous attacks, we use an iterated linearization method to break these two instances. For any given valid ciphertext, we can find its corresponding plaintext within 2 F28 computations after performing once for any public key a computation of complexity less than 2. Our experiment result shows we have unlocked the lock polynomials after several iterations, though we do not know the detailed construction of lock polynomials. Keyword: multivariate public key cryptosystem, TTM, algebraic attack, linearization equation, triangular cryptosystem.
Linear codes with few weights from non-weakly regular plateaued functions

Yadi Wei,Jiaxin Wang,Fang-Wei Fu

2023-10-31

Abstract:Linear codes with few weights have significant applications in secret sharing schemes, authentication codes, association schemes, and strongly regular graphs. There are a number of methods to construct linear codes, one of which is based on functions. Furthermore, two generic constructions of linear codes from functions called the first and the second generic constructions, have aroused the research interest of scholars. Recently, in \cite{Nian}, Li and Mesnager proposed two open problems: Based on the first and the second generic constructions, respectively, construct linear codes from non-weakly regular plateaued functions and determine their weight distributions. Motivated by these two open problems, in this paper, firstly, based on the first generic construction, we construct some three-weight and at most five-weight linear codes from non-weakly regular plateaued functions and determine the weight distributions of the constructed codes. Next, based on the second generic construction, we construct some three-weight and at most five-weight linear codes from non-weakly regular plateaued functions belonging to $\mathcal{NWRF}$ (defined in this paper) and determine the weight distributions of the constructed codes. We also give the punctured codes of these codes obtained based on the second generic construction and determine their weight distributions. Meanwhile, we obtain some optimal and almost optimal linear codes. Besides, by the Ashikhmin-Barg condition, we have that the constructed codes are minimal for almost all cases and obtain some secret sharing schemes with nice access structures based on their dual codes.

Information Theory
Results on Highly Nonlinear Boolean Functions with Provably Good Immunity to Fast Algebraic Attacks

Meicheng Liu,Dongdai Lin

DOI: https://doi.org/10.1016/j.ins.2017.08.097

IF: 8.1

2017-01-01

Information Sciences

Abstract:In the last decade, algebraic and fast algebraic attacks are regarded as the most successful attacks on LFSR-based stream ciphers. Since the notion of algebraic immunity was introduced, the properties and constructions of Boolean functions with maximum algebraic immunity have been researched in a large number of papers. However, there are few results with respect to Boolean functions with provably good immunity against fast algebraic attacks. In previous literatures, only Carlet-Feng function was proven to have good immunity to fast algebraic attacks. In this paper, we first study a large family of highly nonlinear Boolean functions in terms of the immunity to fast algebraic attacks, which includes the functions of Tu-Deng, the functions of Tang et al. and the functions of Jin et al. Based on a sufficient and necessary condition for measuring the immunity of Boolean functions against fast algebraic attacks using bivariate polynomial representation, we propose an efficient method for estimating the immunity of the functions of such family. Then we prove that a family of 2k-variable Boolean functions, including the function recently constructed by Tang et al., are almost perfect algebraic immune for any integer k >= 3. More exactly, they achieve optimal algebraic immunity and almost perfect immunity to fast algebraic attacks. The functions of such family are balanced and have optimal algebraic degree. Besides, we prove a lower bound on their nonlinearity based on the work of Tang et al. which is better than that of Carlet-Feng function. It is also checked for 3 <= k <= 9 that the exact nonlinearity of such functions is very good, which is slightly smaller than that of Carlet-Feng function, and some functions of this family even have a slightly larger nonlinearity than Tang's et al. function. To sum up, among the known functions with provably good immunity against fast algebraic attacks, the functions of this family make a trade-off between the exact value and the lower bound of nonlinearity. (C) 2017 Elsevier Inc. All rights reserved.
Cryptanalysis of General Lu-Lee Type Systems

Haijian Zhou,Ping Luo,Daoshun Wang,Yiqi Dai

DOI: https://doi.org/10.1007/978-3-540-79499-8_32

2008-01-01

Abstract:The Lu-Lee public key cryptosystem and Adiga-Shankar's modification are considered to be insecure with cryptanalysis by integer linear programing, since only 2 or 3 unknown message blocks are used in the modular linear equation for encryption procedure. Unfortunately integer linear programming algorithms falls in trouble with more unknowns. In this paper we present a probabilistic algorithm for cryptanalysis of general Lu-Lee type systems with nmessage blocks. The new algorithm is base on lattice reduction and succeeds to break Lu-Lee type systems with up to 68 message blocks.
Weak and strong type estimates for the multilinear pseudo-differential operators

Mingming Cao,Qingying Xue,Kôzô Yabuta

DOI: https://doi.org/10.1016/j.jfa.2019.108454

IF: 1.891

2020-06-01

Journal of Functional Analysis

Abstract:In this paper, we investigate the boundedness of the multilinear pseudo-differential operator <math>Tσ</math>. First, we establish the local exponential decay estimates for <math>Tσ</math>. In terms of the corresponding commutators <math>Tσ,Σb</math>, we obtain the local subexponential decay estimates. Secondly, we derive the weighted mixed weak type inequality for <math>Tσ</math>, which parallels Sawyer's conjecture for Calderón-Zygmund operators and covers the endpoint weighted inequalities. Last but not least, we present the sharp weighted estimates for <math>Tσ</math> and <math>Tσ,Σb</math>. It is worth mentioning that our results are totally new even in the linear case.

mathematics
Linear algebra over T-pairs

Marianne Akian,Stephane Gaubert,Louis Rowen

2024-03-22

Abstract:This paper treats linear algebra over a semiring pair, in a wide range of applications to tropical algebra and related areas such as hyperrings and fuzzy rings. First we present a more general category of ``pairs'' with their morphisms, called ``weak morphisms,'' paying special attention to supertropical pairs, hyperpairs, and the doubling functor. Then we turn to matrices and the question of whether the row rank, column rank, and submatrix rank of a matrix are equal. Often the submatrix rank is less than or equal to the row rank and the column rank, but there is a counterexample to equality, discovered some time ago by the second author, which we provide in a more general setting (``pairs of the second kind'') that includes the hyperfield of signs. Additional positive results include a version of Cramer's rule, and we find situations when equality holds, encompassing results by Akian, Gaubert, Guterman, Izhakian, Knebusch, and Rowen. We pay special attention to the question of whether $n+1$ vectors of length $n$ need be dependent. At the end, we introduce a category with stronger morphisms, that preserve a surpassing relation.

Rings and Algebras,Commutative Algebra
Minimal Ternary Linear Codes from Vectorial Functions

Yanjun Li,Haibin Kan,Fangfang Liu,Jie Peng,Lijing Zheng,Zepeng Zhuo

2024-03-18

Abstract:The study on minimal linear codes has received great attention due to their significant applications in secret sharing schemes and secure two-party computation. Until now, numerous minimal linear codes have been discovered. However, to the best of our knowledge, no infinite family of minimal ternary linear codes was found from vectorial functions. In this paper, we present a necessary and sufficient condition for a large class of ternary linear codes from vectorial functions such that those codes are minimal. Based on that, we construct several minimal ternary linear codes with three-weight from vectorial regular plateaued functions, and determine their weight distributions. Moreover, we also give a necessary and sufficient condition for a large family of ternary linear codes from vectorial functions such that the codes are minimal and violate the AB condition simultaneously. According to this characterization, we find several minimal ternary linear codes violating the AB condition. Notably, our results show that our method can be applied to solve a problem on minimal linear codes proposed by Li et al.

Information Theory
Searching for linear structures in the failure of the Stone-Weierstrass theorem

Marc Caballer,Sheldon Dantas,Daniel L. Rodríguez-Vidanes

2024-08-12

Abstract:We investigate the failure of the Stone-Weierstrass theorem focusing on the existence of large dimensional vector spaces within the set $\mathcal{C}(L, \mathbb{K}) \setminus \overline{\mathcal{A}}$, where $L$ is a compact Hausdorff space and $\mathcal{A}$ is a self-adjoint subalgebra of $\mathcal{C}(L, \mathbb{K})$ that vanishes nowhere on $L$ but does not necessarily separate the points of $L$. We address the problem of finding the precise codimension of $\overline{\mathcal{A}}$ in a broad setting, which allows us to describe the lineability of $\mathcal{C}(L, \mathbb{K}) \setminus \overline{\mathcal{A}}$ in detail. Our analysis yields both affirmative and negative results regarding the lineability of this set. Furthermore, we also study the set $(\mathcal{C}(\partial{D}, \mathbb{C}) \setminus \overline{\text{Pol}(\partial{D})}) \cup \{0\}$, where $\text{Pol}(\partial{D})$ is the set of all complex polynomials in one variable restricted to the boundary of the unit disk. Recent lineability properties are also taken into account.

Functional Analysis
On weakening tightness to weak tightness

Angelo Bella,Nathan Carlson

DOI: https://doi.org/10.48550/arXiv.1901.04887

2019-01-15

Abstract:The weak tightness $wt(X)$ of a space $X$ was introduced in [11] with the property $wt(X)\leq t(X)$. We investigate several well-known results concerning $t(X)$ and consider whether they extend to the weak tightness setting. First we give an example of a non-sequential compactum $X$ such that $wt(X)=\aleph_0<t(X)$ under $2^{\aleph_0}=2^{\aleph_1}$. In particular, this demonstrates the celebrated Balogh's Theorem [5] does not hold in general if countably tight is replaced with weakly countably tight. Second, we introduce the notion of an S-free sequence and show that if $X$ is a homogeneous compactum then $|X|\leq 2^{wt(X)\pi_\chi(X)}$. This refines a theorem of De la Vega [12]. In the case where the cardinal invariants involved are countable, this also represents a variation of a theorem of Juhász and van Mill [15]. Third, we show that if $X$ is a $T_1$ space, $wt(X)\leq\kappa$, $X$ is $\kappa^+$-compact, and $\psi(\overline{D},X)\leq 2^\kappa$ for any $D\subseteq X$ satisfying $|D|\leq 2^\kappa$, then a) $d(X)\leq 2^\kappa$ and b) $X$ has at most $2^\kappa$-many $G_\kappa$-points. This is a variation of another theorem of Balogh [6]. Finally, we show that if $X$ is a regular space, $\kappa=L(X)wt(X)$, and $\lambda$ is a caliber of $X$ satisfying $\kappa<\lambda\leq \left(2^{\kappa}\right)^+$, then $d(X)\leq 2^{\kappa}$. This extends of theorem of Arhangel'skii [3].

General Topology
Modular forms with non-vanishing central values and linear independence of Fourier coefficients

Debargha Banerjee,Priyanka Majumder

2024-07-02

Abstract:In this article, we are interested in modular forms with non-vanishing central critical values and linear independence of Fourier coefficients of modular forms. The main ingredient is a generalization of a theorem due to VanderKam to modular symbols of higher weights. We prove that for sufficiently large primes $p$, Hecke operators $T_1, T_2, \ldots, T_D$ act linearly independently on the winding elements inside the space of weight $2k$ cuspidal modular symbol $\mathbb{S}_{2k}(\Gamma_0(p))$ with $k\geq 1$ for $D^2\ll p$. This gives a bound on the number of newforms with non-vanishing arithmetic $L$-functions at their central critical points and linear independence on the reductions of these modular forms for prime modulo $l\not=p$.

Number Theory

Linear weaknesses in t-functions

Linear Relation on General Ergodic T-Function

Non-Archimedean analysis, T-functions, and cryptography

Fast Linear Subspace Attacks on Stream Ciphers

Some Results on Fast Algebraic Attacks and Higher-Order Non-Linearities.

The New Implementation Schemes of the TTM Cryptosystem Are Not Secure

Compact Lossy and All-but-One Trapdoor Functions from Lattice

An Infinite Class of Balanced Functions with Optimal Algebraic Immunity, Good Immunity to Fast Algebraic Attacks and Good Nonlinearity

Combinatorial t-designs from special functions

New Insights on Linear Cryptanalysis.

A Local Tb Theorem for Square Functions and Parabolic Layer Potentials

Cryptanalysis of Two New Instances of TTM Cryptosystem.

Linear codes with few weights from non-weakly regular plateaued functions

Results on Highly Nonlinear Boolean Functions with Provably Good Immunity to Fast Algebraic Attacks

Cryptanalysis of General Lu-Lee Type Systems

Weak and strong type estimates for the multilinear pseudo-differential operators

Linear algebra over T-pairs

Minimal Ternary Linear Codes from Vectorial Functions

Searching for linear structures in the failure of the Stone-Weierstrass theorem

On weakening tightness to weak tightness

Modular forms with non-vanishing central values and linear independence of Fourier coefficients