International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Paper: Recursive lower bounds on the nonlinearity profile of Boolean functions and their applications

Authors:
Claude Carlet
Download:
URL: http://eprint.iacr.org/2006/459
Search ePrint
Search Google
Abstract: The nonlinearity profile of a Boolean function (i.e. the sequence of its minimum Hamming distances $nl_r(f)$ to all functions of degrees at most $r$, for $r\geq 1$) is a cryptographic criterion whose role against attacks on stream and block ciphers has been illustrated by many papers. It plays also a role in coding theory, since it is related to the covering radii of Reed-Muller codes. We introduce a method for lower bounding its values and we deduce bounds on the second order nonlinearity for several classes of cryptographic Boolean functions, including the Welch and the multiplicative inverse functions (used in the S-boxes of the AES). In the case of this last infinite class of functions, we are able to bound the whole profile, and we do it in an efficient way when the number of variables is not too small. This allows showing the good behavior of this function with respect to this criterion as well.
BibTeX
@misc{eprint-2006-21950,
  title={Recursive lower bounds on the nonlinearity profile of Boolean functions and their applications},
  booktitle={IACR Eprint archive},
  keywords={secret-key cryptography /},
  url={http://eprint.iacr.org/2006/459},
  note={ claude.carlet@inria.fr 13829 received 4 Dec 2006, last revised 12 Nov 2007},
  author={Claude Carlet},
  year=2006
}