Abstract:Motivated by new applications such as secure Multi-Party Computation (MPC), Fully Homomorphic Encryption (FHE), and Zero-Knowledge proofs (ZK), many MPC-, FHE- and ZK-friendly symmetric-key primitives that minimize the< number of multiplications over Fp for a large prime p have been recently proposed in the literature. These symmetric primitives are usually defined via invertible functions, including (i) Feistel and Lai-Massey schemes and (ii) SPN constructions instantiated with invertible non-linear S-Boxes. However, the “invertibility” property is actually never required in any of the mentioned applications.In this paper, we discuss the possibility to set up MPC-/FHE-/ZK-friendly symmetric primitives instantiated with non-invertible bounded surjective functions. In contrast to one-to-one functions, each output of a l-bounded surjective function admits at most l pre-images. The simplest example is the square map x → x2 over Fp for a prime p ≥ 3, which is (obviously) 2-bounded surjective. When working over Fnp for n ≥ 2, we set up bounded surjective functions by re-considering the recent results proposed by Grassi, Onofri, Pedicini and Sozzi at FSE/ToSC 2022 as starting points. Given a quadratic local map F : Fmp → Fp for m ∈ {1, 2, 3}, they proved that the shift-invariant non-linear function over Fnp defined as SF (x0, x1, . . . , xn−1) = y0∥y1∥ . . . ∥yn−1 where yi := F(xi, xi+1) is never invertible for any n ≥ 2 · m − 1. Here, we prove that • the quadratic function F : Fmp → Fp for m ∈ {1, 2} that minimizes the probability of having a collision for SF over Fnp is of the form F(x0, x1) = x20 + x1 (or equivalent);• the function SF over Fnp defined as before via F(x0, x1) = x20 +x1 (or equivalent) is 2n-bounded surjective.As concrete applications, we propose modified versions of the MPC-friendly schemes MiMC, HadesMiMC, and (partially of) Hydra, and of the FHE-friendly schemes Masta, Pasta, and Rubato. By instantiating them with the bounded surjective quadratic functions proposed in this paper, we are able to improve the security and/or the performances in the target applications/protocols.

Constructions of Negabent Functions over Finite Fields

Some Results on Bent-Negabent Boolean Functions over Finite Fields

New constructions of quaternary bent functions

A new construction of perfect nonlinear functions using Galois rings

A Construction of Bent Functions with Optimal Algebraic Degree and Large Symmetric Group

Vectorial Negabent Concepts: Similarities, Differences, and Generalizations

The Explicit Dual of Leander's Monomial Bent Function.

On constructing bent functions from cyclotomic mappings

Several New Infinite Families of Bent Functions Via Second Order Derivatives.

Nonexistence of generalized bent functions from $$\mathbb {Z}_{2}^{n}$$ to $$\mathbb {Z}_{m}$$Zm

Nonexistence of generalized bent functions from ℤ_2^n to ℤ_m

A New 10-Variable Cubic Bent Function Outside the Completed Maiorana-McFarland Class.

Generic Constructions of (Boolean and Vectorial) Bent Functions and Their Consequences

An Open Problem on the Bentness of Mesnager's Functions

Generalized partially bent functions

Bilinear forms with Kloosterman and Gauss sums in function fields

Complete Characterization of Generalized Bent and 2-Bent Boolean Functions.

Secondary Constructions of Bent Functions and Highly Nonlinear Resilient Functions

Bounded Surjective Quadratic Functions over Fnp for MPC-/ZK-/FHE-Friendly Symmetric Primitives

On the linear structures of Balanced functions and quadratic APN functions