Abstract:We investigate the affine equivalence (AE) problem of S-boxes. Given two S-boxes denoted as $S_1$ and $S_2$, we aim to seek two invertible AE transformations $A,B$ such that $S_1\circ A = B\circ S_2$ holds. Due to important applications in the analysis and design of block ciphers, the investigation of AE algorithms has performed growing significance. In this paper, we propose zeroization on S-box firstly, and the AE problem can be transformed into $2^n$ linear equivalence problems by this zeroization operation. Secondly, we propose standard orthogonal spatial matrix (SOSM), and the rank of the SOSM is invariant under AE transformations. Finally, based on the zeroization operation and the SOSM method, we propose a depth first search (DFS) method for determining AE of S-boxes, named the AE\_SOSM\_DFS algorithm. Using this matrix invariant, we optimize the temporal complexity of the algorithm to approximately $\frac{1}{2^n}$ of the complexity without SOSM. Specifically, the complexity of our algorithm is $O(2^{3n})$. In addition, we also conducted experiments with non-invertible S-boxes, and the performance is similar to that of invertible S-boxes. Moreover, our proposed algorithm can effectively handle S-boxes with low algebraic degree or certain popular S-boxes such as namely AES and ARIA\_s2, which are difficult to be handled by the algorithm proposed by Dinur (2018). Using our algorithm, it only takes 5.5 seconds to find out that the seven popular S-boxes namely AES, ARIA\_s2, Camellia, Chiasmus, DBlock, SEED\_S0, and SMS4 are affine equivalent and the AE transformations of these S-boxes are provided.

An Implementation Algorithm of S-Box Based on Inverse Transformation in Galois Field

A new algorithm of S-box for hardware implementation of SMS4

90 nm CMOS Implementation of Multiplicative Inverse of the S-Box for AES Algorithm using Six Transistor XOR Gate

Application of the Composite Field in the Design of an Improved AES S-box Based on Inversion

A Compact Implementation of Masked AES S-Box

An Expression Method to Implement S-Box and Inverse S-Box Substitution for AES Algorithm

8×8 S-boxes over Klein four-group and Galois field $ {GF}\left({2}^{4}\right) $: AES redesign

Logic Realization of Galois Field for AES SBOX using Quantum Dot Cellular Automata

An improved s-box of lightweight block cipher roadrunner for hardware optimization

An Affine Equivalence Algorithm for S-boxes based on Matrix Invariants

Low Delay AES S-Box Designs Based on Matrix Merging Method

Design of a Masked S-Box for SM4 Based on Composite Field.

A Very Compact Masked S-Box for High-Performance Implementation of SM4 Based on Composite Field.

Low-cost hardware implementation of SM4 based on composite field

Design and Implementation of Generic Low-entropy High-order Composite Field Based Masking Scheme

In-depth analysis of S-boxes over binary finite fields concerning their differential and Feistel boomerang differential uniformities

Design and Implementation of SM4 Block Cipher Based on Composite Field

Low-Cost Energy-Efficient Side-Channel Attacks Resistant AES S-Box with Power-Aware Hiding Inverter in GF(2^4).

A Low Critical Path Delay Structure For Composite Field Aes S-Box Based On Constant Matrices Multiplication Merging

Side-channel Attack-Resistant AES S-box with Hidden Subfield Inversion and Glitch-Free Masking

The Application of Hypercube Method in S Box of SM4