Constructing Differentially 4 Uniform Permutations from Known Ones  

作　　者：YU Yuyin WANG Mingsheng LI Yongqiang 

机构地区：[1]State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100195, China [2]Graduate University of the Chinese Academy of Sciences, Beijing 100049, China

出　　处：《Chinese Journal of Electronics》2013年第3期495-499,共5页电子学报（英文版）

基　　金：This work is supported by the National Natural Science Foundation of China （No.60970134, No.11171323, No.61173134）, the IIE＇s Cryptography Research Project （No.Y2Z0011102）, the Strategic Priority Research PrOgram of the Chinese Academy of Sciences （No.XDA06010701）.

摘　　要：Low differential uniformity functions provide good resistance to differential attacks. The AES （Advanced encryption standard） uses a differentially 4 uniform function （the inverse function） as its S-box. We give a further study of the inverse function in this paper. It is observed that after exchanging two values of a low differential uniformity function, its differential property still keeps good. Especially, for the inverse function over F2^n （n even）, various possible differential uniformities are completely determined after its two values are exchanged. As a consequence, we get some highly nonlinear permutations with differential uniformity 4 which are not CCZ-equivalent （Carlet Charpin-Zinoviev equivalent） to the inverse function on F2^n.

关 键 词：Block cipher Advanced encryption standard （AES） S-BOX Inverse function. 

分 类 号：O157[理学—数学] TN918.1[理学—基础数学]