On the Higher Order Nonlinearities of Boolean Functions and S-Boxes, and Their Generalizations

  • Authors:
  • Claude Carlet

  • Affiliations:
  • Department of Mathematics (MAATICAH), University of Paris 8, Saint-Denis Cedex, France 93526

  • Venue:
  • SETA '08 Proceedings of the 5th international conference on Sequences and Their Applications
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

The r-th order nonlinearity of a Boolean function $f:F_2^n\to F_2$ is its minimum Hamming distance to all functions of algebraic degrees at most r, where ris a positive integer. The r-th order nonlinearity of an S-box $F:F_2^n\to F_2^m$ is the minimum r-th order nonlinearity of its component functions v·F, $v\in F_2^m\setminus \{0\}$. The role of this cryptographic criterion against attacks on stream and block ciphers has been illustrated by several papers. Its study is also interesting for coding theory and is related to the covering radius of Reed-Muller codes (i.e. the maximum multiplicity of errors that have to be corrected when maximum likelihood decoding is used on a binary symmetric channel). We give a survey of what is known on this parameter, including the bounds involving the algebraic immunity of the function, the bounds involving the higher order nonlinearities of its derivatives, and the resulting bounds on the higher order nonlinearities of the multiplicative inverse functions (used in the S-boxes of the AES). We show an improvement, when we consider an S-box instead of a Boolean function, of the bounds on the higher order nonlinearity expressed by means of the algebraic immunity. We study a generalization (for S-boxes) of the notion and we give new results on it.