The multivariate method strikes again: New power functions with low differential uniformity in odd characteristic

Abstract

Let f(x) = xd be a power mapping over mathbb {F}_{n} and mathcal {U}_{d} the maximum number of solutions xin mathbb {F}_{n} of {Delta }_{f,c}(x):=f(x+c)-f(x)=atext {, where }c,ain mathbb {F}_{n}text { and } cneq 0. f is said to be differentially k-uniform if mathcal {U}_{d} =k. The investigation of power functions with low differential uniformity over finite fields mathbb {F}_{n} of odd characteristic has attracted a lot of research interest since Helleseth, Rong and Sandberg started to conduct extensive computer search to identify such functions. These numerical results are well-known as the Helleseth-Rong-Sandberg tables and are the basis of many infinite families of power mappings x^{d_{n}},n in mathbb {N}, of low uniformity (see e.g. Dobbertin et al. Discret. Math. 267, 95–112 2003; Helleseth et al. IEEE Trans. Inform Theory, 45, 475–485 1999; Helleseth and Sandberg AAECC, 8, 363–370 1997; Leducq Amer. J. Math. 1(3) 115–123 1878; Zha and Wang Sci. China Math. 53(8) 1931–1940 2010). Recently the crypto currency IOTA and Cybercrypt started to build computer chips around base-3 logic to employ their new ternary hash function Troika, which currently increases the cryptogrpahic interest in such families. Especially bijective power mappings are of interest, as they can also be employed in block- and stream ciphers. In this paper we contribute to this development and give a family of power mappings x^{d_{n}} with low uniformity over mathbb {F}_{n}, which is bijective for p ≡ 3 mod 4. For p = 3 this yields a family x^{d_{n}} with 3leq mathcal {U}_{d_{n}}leq 4, where the family of inverses has a very simple description. These results explain “open entries” in the Helleseth-Rong-Sandberg tables. We apply the multivariate method to compute the uniformity and thereby give a self-contained introduction to this method. Moreover we will prove for a related family of low uniformity introduced in Helleseth and Sandberg (AAECC, 8 363–370 1997) that it yields permutations.