Abstract:Motivated by new applications such as secure Multi-Party Computation (MPC), Fully Homomorphic Encryption (FHE), and Zero-Knowledge proofs (ZK), many MPC-, FHE- and ZK-friendly symmetric-key primitives that minimize the< number of multiplications over Fp for a large prime p have been recently proposed in the literature. These symmetric primitives are usually defined via invertible functions, including (i) Feistel and Lai-Massey schemes and (ii) SPN constructions instantiated with invertible non-linear S-Boxes. However, the “invertibility” property is actually never required in any of the mentioned applications.In this paper, we discuss the possibility to set up MPC-/FHE-/ZK-friendly symmetric primitives instantiated with non-invertible bounded surjective functions. In contrast to one-to-one functions, each output of a l-bounded surjective function admits at most l pre-images. The simplest example is the square map x → x2 over Fp for a prime p ≥ 3, which is (obviously) 2-bounded surjective. When working over Fnp for n ≥ 2, we set up bounded surjective functions by re-considering the recent results proposed by Grassi, Onofri, Pedicini and Sozzi at FSE/ToSC 2022 as starting points. Given a quadratic local map F : Fmp → Fp for m ∈ {1, 2, 3}, they proved that the shift-invariant non-linear function over Fnp defined as SF (x0, x1, . . . , xn−1) = y0∥y1∥ . . . ∥yn−1 where yi := F(xi, xi+1) is never invertible for any n ≥ 2 · m − 1. Here, we prove that • the quadratic function F : Fmp → Fp for m ∈ {1, 2} that minimizes the probability of having a collision for SF over Fnp is of the form F(x0, x1) = x20 + x1 (or equivalent);• the function SF over Fnp defined as before via F(x0, x1) = x20 +x1 (or equivalent) is 2n-bounded surjective.As concrete applications, we propose modified versions of the MPC-friendly schemes MiMC, HadesMiMC, and (partially of) Hydra, and of the FHE-friendly schemes Masta, Pasta, and Rubato. By instantiating them with the bounded surjective quadratic functions proposed in this paper, we are able to improve the security and/or the performances in the target applications/protocols.

Constructing Differentially 4-Uniform Permutations over ${\bbf}_{2^{2k}}$ Via the Switching Method.

More New Classes Of Differentially 4-Uniform Permutations With Good Cryptographic Properties

On the Boomerang Uniformity of Permutations of Low Carlitz Rank

A Note on the Construction of Differentially Uniform Permutations Using Extension Fields.

On CCZ-equivalence Between the Bracken-Tan-Tan Function and Power Functions

Some new results on permutation polynomials over finite fields

A novel efficient S-box design algorithm based on a new chaotic map and permutation

In-depth analysis of S-boxes over binary finite fields concerning their differential and Feistel boomerang differential uniformities

Generalized Triangular Dynamical System: An Algebraic System for Constructing Cryptographic Permutations over Finite Fields

Some classes of functions with low [math]-differential uniformity over finite fields

On the boomerang uniformity of (quadratic) permutations over $F_{2^n}$

On permutation quadrinomials with boomerang uniformity 4 and the best-known nonlinearity

On the second-order zero differential properties of several classes of power functions over finite fields

Cryptographic analysis and construction of complete permutations using a recursive approach

A new class of S-boxes with optimal Feistel boomerang uniformity

Differential uniformity properties of some classes of permutation polynomials

On the Boomerang Spectrum of Power Permutation $X^{2^{3n}+2^{2n}+2^{n}-1}$ over $\GF{2^{4n}}$ and Extraction of Optimal Uniformity Boomerang Functions

Some classes of power functions with low c-differential uniformity over finite fields

Bounded Surjective Quadratic Functions over Fnp for MPC-/ZK-/FHE-Friendly Symmetric Primitives

New P$c$N and AP$c$N functions over finite fields

The c-boomerang uniformity of two classes of permutation polynomials over finite fields