Abstract:We investigate the affine equivalence (AE) problem of S-boxes. Given two S-boxes denoted as $S_1$ and $S_2$, we aim to seek two invertible AE transformations $A,B$ such that $S_1\circ A = B\circ S_2$ holds. Due to important applications in the analysis and design of block ciphers, the investigation of AE algorithms has performed growing significance. In this paper, we propose zeroization on S-box firstly, and the AE problem can be transformed into $2^n$ linear equivalence problems by this zeroization operation. Secondly, we propose standard orthogonal spatial matrix (SOSM), and the rank of the SOSM is invariant under AE transformations. Finally, based on the zeroization operation and the SOSM method, we propose a depth first search (DFS) method for determining AE of S-boxes, named the AE\_SOSM\_DFS algorithm. Using this matrix invariant, we optimize the temporal complexity of the algorithm to approximately $\frac{1}{2^n}$ of the complexity without SOSM. Specifically, the complexity of our algorithm is $O(2^{3n})$. In addition, we also conducted experiments with non-invertible S-boxes, and the performance is similar to that of invertible S-boxes. Moreover, our proposed algorithm can effectively handle S-boxes with low algebraic degree or certain popular S-boxes such as namely AES and ARIA\_s2, which are difficult to be handled by the algorithm proposed by Dinur (2018). Using our algorithm, it only takes 5.5 seconds to find out that the seven popular S-boxes namely AES, ARIA\_s2, Camellia, Chiasmus, DBlock, SEED\_S0, and SMS4 are affine equivalent and the AE transformations of these S-boxes are provided.

An Expression Method to Implement S-Box and Inverse S-Box Substitution for AES Algorithm

Application of the Composite Field in the Design of an Improved AES S-box Based on Inversion

90 nm CMOS Implementation of Multiplicative Inverse of the S-Box for AES Algorithm using Six Transistor XOR Gate

A Compact Implementation of Masked AES S-Box

An improved s-box of lightweight block cipher roadrunner for hardware optimization

Power-aware Hiding Method for S-box Protection

A new algorithm of S-box for hardware implementation of SMS4

Optimized quantum implementation of AES

The Application of Hypercube Method in S Box of SM4

Fast Substitution-Box Evaluation Algorithm and Its Efficient Masking Scheme for Block Ciphers

A Ciphertext Reduction Scheme for Garbling an S-Box in an AES Circuit with Minimal Online Time

Side-channel Attack-Resistant AES S-box with Hidden Subfield Inversion and Glitch-Free Masking

A Low-cost Reconfigurable Architecture for AES Algorithm

An Affine Equivalence Algorithm for S-boxes based on Matrix Invariants

Low Delay AES S-Box Designs Based on Matrix Merging Method

Low-Cost Energy-Efficient Side-Channel Attacks Resistant AES S-Box with Power-Aware Hiding Inverter in GF(2^4).

AES (Advanced Encryption Standard) encryption method and power attack resisting method based on the same

8×8 S-boxes over Klein four-group and Galois field $ {GF}\left({2}^{4}\right) $: AES redesign

Implementation of an 8-bit bit-slice AES S-box with rapid single flux quantum circuits

Area-efficient Polynomial Modular Multiplication over GF(2∧n) and Application to AES

A Full Matrix Joint Optimization Method for Hardware Implementation of AES MixColumns/InvMixColumns.