Open Access
Issue
Wuhan Univ. J. Nat. Sci.
Volume 26, Number 6, December 2021
Page(s) 453 - 458
DOI https://doi.org/10.1051/wujns/2021266453
Published online 17 December 2021

© Wuhan University 2021

Licence Creative CommonsThis is an Open Access article distributed under the terms of the Creative Commons Attribution License (https://creativecommons.org/licenses/by/4.0), which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

0 Introduction

Boolean functions are important objects in discrete mathematics. They play a role in symmetric cryptography and error-correcting coding theory, and they also have a significant influence on the design and analysis of cryptographic algorithms. The Walsh transform is a vital tool to investigate cryptographic properties of Boolean functions. Some important properties of cryptographic functions, such as resiliency and nonlinearity can be characterized by their Walsh transform[1-3]. An interesting problem is to find Boolean functions with few Walsh transform values and determine their distributions.

Bent functions introduced by Rothaus[4] in 1976 are interesting combinatorial objects with maximum Hamming distance to the set of all affine functions, but they cannot be used in cryptography directly since they exist only in an even number of variables and are not be balanced. Such functions have been extensively studied because of their important applications in coding theory[5,6], cryptography[7], and sequence designs[8]. To get balanced functions with high nonlinearity in odd or even number of variable, Carlet[9] generalized the bent functions to plateaued functions and they take Walsh transform values 0, ±2k for a fixed positive integer k. Semi-bent, as a particular case, is an important kind of Boolean functions with three Walsh transform values. In Ref. [10], some classes of Boolean functions with four-valued Walsh spectra are presented by complementing the values of bent functions at two points, one of which is zero and the other is nonzero, and their Walsh spectrum distributions are determined finally. Inspired by this work, recently Jin et al[11] presented three classes of Boolean functions with six-valued Walsh spectra, which were derived from bent functions by complementing their values at the zero and another two nonzero points, and determined their Walsh spectrum distributions with a similar method. In Ref. [12], some classes of Boolean functions with five Walsh transform values were presented by adding the product of two or three linear functions into some known bent functions, and their Walsh spectrum distributions were determined finally. In Ref. [13], Tang et al gave a generic construction of bent functions defined as f(x)=g(x)+F(Tr1n(u1x),Tr1n(u2x),,Tr1n(uτx)), where n=2m, g(x) is any known bent function over F2n satisfying some conditions, F(X1,X2,,Xτ) is an arbitrary polynomial in F2[X1,X2,,Xτ]. In particular, the cases of F(X1,X2,X3)=X1X2X3 and F(X1,X2)=X1X2 have been studied by Xu et al[12] and Mesnager[14], respectively. The purpose of this paper is to present the Walsh transform of the Boolean function defined as g(x)=f(x)Tr1n(x)+h(x)Tr1n(δx)(1) where f(x) and h(x) are Boolean functions over F2n and δF2n. In particular, the case of g(x)=f(x)Tr1n(x)+(f(x)+1)Tr1n(δx)(2) has been studied by Pang et al[15].

This paper is organized as follows. In Section 1, we give some basic concepts and results. In Section 2, we present the Walsh transform of the Eq. (1). In Section 3, we conclude this paper.

1 Preliminaries

Let F2n denote the n-dimensional vector space over F2, and F2n denote the finite field with 2n elements. For any set E, E=E\{0}. By viewing each x=x1ξ1+x2ξ2++xnξnF2n as a vector (x1,x2,,xn)F2n where {ξ1,ξ2,,ξn} is a basis of F2n over F2, we identify F2n with F2n and then every function f:F2nF2 is equivalent to a Boolean function. For x,yF2n, the inner product is defined as xy=Tr1n(xy).

For any positive integer k|n, the trace function from F2n to F2k is the mapping defined as Trkn(x)=i=0nk1x2ik=x+x2k+x22k++x2n1,xF2n When k=1, Tr1n(x)=i=0n1x2i=x+x2+x22++x2n1 is called the absolute trace function.

Some important and useful properties of the trace function are provided in the following:

1) Tr1n(ax+by)=aTr1n(x)+bTr1n(y), x,yF2n and a,bF2.

2) Tr1n(x2)=Tr1n(x) for any xF2n.

3) For any αF2n, xF2n(1)Tr1n(αx)=0 if α0.

4) When F2F2mF2n, the trace function Tr1n(α) satisfies the transitivity property, that is, Tr1n(α)=Tr1m(Trmn(α)).

5) For any αF2n, (Tr1n(α))2j=Tr1n(α2j), j=0,1,.

Let f be a Boolean function from F2n to F2, and the set of which is denoted by Bn. The Walsh transform of fBn at F2n is defined as Wf(a)=xF2n(1)f(x)+Tr1n(ax),aF2n.

The values Wf(a), aF2n are called the Walsh coefficients of f. The Walsh spectrum of a Boolean function f is the multiset {Wf(a),aF2n}. A Boolean function f is said to be balanced if Wf(0)=0.

The nega-Hadamard transform of f(x) at aF2n is the complex valued function Nf(a)=xF2n(1)f(x)+Tr1n(ax)+σ(x)iTr1n(x) where σ(x) is the function defined by σ(x)=0i<jn1(x)2i(x)2j. A function fBn is negabent if |Nf(a)|=1 for all aF2n.

2 Main Results

Let n be a positive integer and f be a Boolean function from F2n to F2. For any δF2n, the Boolean function g(x)=f(x)Tr1n(x)+h(x)Tr1n(δx) can be written asg(x)=f(x)Tr1n(x)+h(x)Tr1n(δx)={0,xT0,0h(x),xT0,1f(x),xT1,0f(x)+h(x),xT1,1where Ti,j={xF2n|Tr1n(x)=i    and    Tr1n(δx)=j} for i,j=0,1.

The relationship between  Wg(b) and Wf(b), Wh(b), Wf+h(b) is given in Theorem 1.

Theorem 1   Let δF2n,g(x)=f(x)Tr1n(x)+h(x)Tr1n(δx)Then, the Walsh transform of g(x) at bF2n is given byWg(b){2n2+14[Wf(0)Wf(1)+Wf(δ)Wf(δ+1)+Wh(0)+Wh(1)Wh(δ)Wh(δ+1)     +Wf+h(0)Wf+h(1)Wf+h(δ)+Wf+h(δ+1)]ifb=02n2+14[Wf(0)+Wf(1)Wf(δ)+Wf(δ+1)+Wh(0)+Wh(1)Wh(δ)Wh(δ+1)                         Wf+h(0)+Wf+h(1)+Wf+h(δ)Wf+h(δ+1)],ifb=12n2+14[Wf(0)Wf(1)+Wf(δ)Wf(δ+1)Wh(0)Wh(1)+Wh(δ)+Wh(δ+1)                           Wf+h(0)+Wf+h(1)+Wf+h(δ)Wf+h(δ+1)],ifb=δ2n2+14[Wf(0)+Wf(1)Wf(δ)+Wf(δ+1)Wh(0)Wh(1)+Wh(δ)+Wh(δ+1)                         +Wf+h(0)Wf+h(1)Wf+h(δ)+Wf+h(δ+1)],ifb=δ+114[Wf(b)Wf(b+1)+Wf(b+δ)Wf(b+δ+1)+Wh(b)+Wh(b+1)                                        Wh(b+δ)Wh(b+δ+1)+Wf+h(b)Wf+h(b+1)Wf+h(b+δ)+Wf+h(b+δ+1)],ifbF2n\{1,δ,δ+1}

1) When δ=0,Wg(b)={2n1+12[Wf(0)Wf(1)],if b=02n112[Wf(0)Wf(1)],if b=112[Wf(b)Wf(b+1)],if bF2n\{1}

2) When δ=1, Wg(b)={2n1+12[Wf+h(0)Wf+h(1)],if b=02n112[Wf+h(0)Wf+h(1)],if b=112[Wf+h(b)Wf+h(b+1)],if bF2n\{1}

3) When δF2n\{1},

Proof   For simplicity, denoteθt=xTi,j(1)f(x)+Tr1n(bx),θt=xTi,j(1)h(x)+Tr1n(bx),θt=xTi,j(1)f(x)+h(x)+Tr1n(bx)where i,j{0,1}, t=2i+j, 0t3.

The proof proceeds in terms of three cases: δ=0, δ=1 and δF2n\{1}.

1) If δ=0, then one obtainsWg(b)=xF2n(1)f(x)Tr1n(x)+Tr1n(bx)         =xF2n,Tr1n(x)=0(1)Tr1n(bx)+xF2n,Tr1n(x)=1(1)f(x)+Tr1n(bx)=A1+A2,where A1=Tr1n(x)=0(1)Tr1n(bx), A2=Tr1n(x)=1(1)f(x)+Tr1n(bx).

Note thatA1={2n1,if b=0,10,otherwiseand A2=θ2+θ3.

Then byWf(b)=xF2n(1)f(x)+Tr1n(bx)         =θ0+θ1+θ2+θ3andWf(b+1)=xF2n(1)f(x)+Tr1n((b+1)x)              =θ0+θ1θ2θ3,we haveA2=12[Wf(b)Wf(b+1)]

2) The proof of 2) is obvious from 1).

3) If δF2n\{1}, then one obtainsWg(b)=xF2n(1)f(x)Tr1n(x)+h(x)Tr1n(δx)+Tr1n(bx)         =xT0,0(1)Tr1n(bx)+xT0,1(1)h(x)+Tr1n(bx)         +xT1,0(1)f(x)+Tr1n(bx)+xT1,1(1)f(x)+h(x)+Tr1n(bx)         =C1+θ1+θ2+θ3where C1=xT0,0(1)Tr1n(bx).

Note thatC1={2n2,if b=0,  1,  δ,  δ+1,0,otherwise.Together with the factWf(b+δ)=xF2n(1)f(x)+Tr1n((b+δ)x)               =xT0,0(1)f(x)+Tr1n(bx)xT0,1(1)f(x)+Tr1n(bx)               +xT1,0(1)f(x)+Tr1n(bx)xT1,1(1)f(x)+Tr1n(bx)               =θ0θ1+θ2θ3andWf(b+δ+1)=xF2n(1)f(x)+Tr1n((b+δ+1)x)                   =xT0,0(1)f(x)+Tr1n(bx)xT0,1(1)f(x)+Tr1n(bx)                   xT1,0(1)f(x)+Tr1n(bx)+xT1,1(1)f(x)+Tr1n(bx)                   =θ0θ1θ2+θ3Similarly,Wh(b)=(θ0+θ1+θ2+θ3)Wh(b+1)=(θ0+θ1θ2θ3)Wh(b+δ)=(θ0θ1+θ2θ3)Wh(b+δ+1)=(θ0θ1θ2+θ3)Wf+h(b)=(θ0+θ1+θ2+θ3)Wf+h(b+1)=(θ0+θ1θ2θ3)Wf+h(b+δ)=(θ0θ1+θ2θ3)Wf+h(b+δ+1)=(θ0θ1θ2+θ3)  Then byθ2θ1=12[Wf(b+δ)Wf(b+1)]θ1+θ3=12[Wf(b)Wf(b+δ)]θ2θ3=12[Wf(b+δ)Wf(b+δ+1)]we haveθ2=14[Wf(b)Wf(b+1)+Wf(b+δ)Wf(b+δ+1)]byθ1+θ3=12[Wh(b)Wh(b+δ)]θ1θ3=12[Wh(b+1)Wh(b+δ+1)]we haveθ1=14[Wh(b)+Wh(b+1)Wh(b+δ)Wh(b+δ+1)]Similarly, we haveθ3=14[Wf+h(b)Wf+h(b+1)Wf+h(b+δ)+Wf+h(b+δ+1)]One immediately gets thatθ1+θ2+θ3=14[Wf(b)Wf(b+1)+Wf(b+δ)Wf(b+δ+1)+Wh(b)+Wh(b+1)Wh(b+δ)Wh(b+δ+1)+Wf+h(b)Wf+h(b+1)Wf+h(b+δ)+Wf+h(b+δ+1)]when b=0,Wg(0)=2n2+14[Wf(0)Wf(1)+Wf(δ)Wf(δ+1)         +Wh(0)+Wh(1)Wh(δ)Wh(δ+1)           +Wf+h(0)Wf+h(1)Wf+h(δ)+Wf+h(δ+1)]when b=1,Wg(1)=2n2+14[Wf(0)+Wf(1)Wf(δ)+Wf(δ+1)        +Wh(0)+Wh(1)Wh(δ)Wh(δ+1)                           Wf+h(0)+Wf+h(1)+Wf+h(δ)Wf+h(δ+1)]when b=δ,Wg(δ)=2n2+14[Wf(0)Wf(1)+Wf(δ)Wf(δ+1)         Wh(0)Wh(1)+Wh(δ)+Wh(δ+1)                        Wf+h(0)+Wf+h(1)+Wf+h(δ)Wf+h(δ+1)]when b=δ+1,Wg(δ+1)=2n2+14[Wf(0)+Wf(1)Wf(δ)+Wf(δ+1)Wh(0)Wh(1)+Wh(δ)+Wh(δ+1)  +Wf+h(0)Wf+h(1)Wf+h(δ)+Wf+h(δ+1)]The proof is completed.

In particular, when h(x)=f(x)+1, the function g(x)=f(x)Tr1n(x)+(f(x)+1)Tr1n(δx) is exactly the ones studied by Pang et al[15]. Note that our generic construction works for any f(x) and h(x). Therefore, our construction contains the previous ones in Ref. [15] as special cases.

Corollary 1   Let δF2n\{1}, andg(x)=f(x)Tr1n(x)+(f(x)+1)Tr1n(δx)The Walsh transform of g(x) at bF2n is given byWg(b)={2n1+12[Wf(δ+1)Wf(0)],if b=12n112[Wf(δ+1)Wf(0)],if b=δ12[Wf(b+δ)Wf(b+1)],if bF2n\{1,δ}In the following, pang proposed three new classes of Boolean functions having the form as Eq. (2) by suitable choices of f(x). The first class is obtained from bent functions, including Dillon bent, kasami bent and Gold-like bent functions, and from the definition of the dual of bent functions, the Walsh transform value distribution of such class is presented. Ref. [15] indicates that the Walsh spectrum distribution of g(x) derived from bent functions is obtained from calculating the dual function of f and the values of #H1, #H2 and #H3. Therefore, the Walsh spectrum distribution ofg(x)=Tr1n(ax2m1)Tr1n(x)+(Tr1n(ax2m1)+1)Tr1n(δx)is presented.

The second class is derived from Gold functions f(x)=Tr1n(ax2i+1) and their Walsh spectrum distribution is obtained by making use of the Walsh transform property of Gold functions and the known conclusions of Weil sums in characteristic 2. The Walsh spectrum distribution of g(x) which is obtained by Gold functions is discussed in the following three cases.

Case 1  n/d is even and aαt(2d+1) for any integer t. It is known that in this case f(x)=Tr1n(ax2i+1) is bent. Then the Walsh spectrum distribution ofg(x)=Tr1n(ax2i+1)Tr1n(x)+(Tr1n(ax2i+1)+1)Tr1n(δx)is given in Ref. [15].

Case 2  n/d is even and a=αt(2d+1) for some integer t. In this case the Walsh spectrum distribution ofg(x)=Tr1n(ax2i+1)Tr1n(x)+(Tr1n(ax2i+1)+1)Tr1n(δx)depends on whether h(x)=(δ+1)2i is solvable.

Case 3  n/d is odd. In this case we only need to consider f(x)=Tr1n(x2i+1), then the Walsh spectrum distribution ofg(x)=Tr1n(ax2i+1)Tr1n(x)+(Tr1n(ax2i+1)+1)Tr1n(δx)is presented in Ref. [15].

The last class comes from the product of linearized polynomials which have three or four Walsh transform values. With the help of k-tuple balance property, the Walsh spectrum distribution of such functions are determined. Ref. [15] present the Walsh transform of f(x)=i=1kTr1n(aix) together with the Walsh transform of Eq. (2), the Walsh spectrum distribution ofg(x)=i=1kTr1n(aix)Tr1n(x)+(i=1kTr1n(aix)+1)Tr1n(δx)is given.

In another particular case, when f(x)=0 and h(x)=Tr1n(ux), the function g(x)=Tr1n(ux)Tr1n(vx) is studied by Wu et al[16]. They give the necessary and sufficient conditions for g(x) to be negabent.

Corollary 2   Let g(x)=Tr1n(ux)Tr1n(vx), where (u,v)F2n×F2n. Then g(x) is negabent on F2n if and only if one of the following conditions is satisfied:

1) Tr1n(u)=0 and Tr1n(uv)=0.

2) Tr1n(u)=1 and Tr1n((u+1)v)=0.

In Ref. [16], first they presented the necessary and sufficient conditions for the functionsf(x)=Tr1k(λx2k+1)+Tr1n(ux)Tr1n(vx)to be negabent, where n=2k, (u,v)F2n×F2n, λF2k, when λ=0 it is the one discussed in Ref. [16]. Further, by using some permutation trinomials over F2n, they presented some classes of negabent functions of the formf(x)=Tr1k(λx2k+1)+Tr1n(ux)Tr1n(vx),where 0<k<n.

3 Conclusion

In this paper, we proposed the Walsh transform of a class of Boolean functions by using the properties of the Walsh transform and the trace function. Then, we hope that we can deduce the Walsh spectrum distributions of g(x) defined as Eq. (1) by suitable choices of f(x) and h(x). Further, several new classes of Boolean functions with few Walsh transform values are obtained.

References

  1. Carlet C, Mesnager S. Four decades of research on bent functions [J]. Designs, Codes and Cryptography, 2016, 78(1): 5-50. [Google Scholar]
  2. Mesnager S. On Semi-Bent Functions and Related Plateaued Functions over the Galois Field [M]. Berlin: Springer-Verlag, 2014. [Google Scholar]
  3. Tu Z B, Zheng D B, Zeng X Y, et al. Boolean functions with two distinct Walsh coefficients [J]. Applicable Algebra in Engineering Communication and Computing, 2011, 22(5-6): 359-366. [Google Scholar]
  4. Rothaus O S. On “bent” functions [J]. Journal of Combinatorial Theory, 1976, 20(3): 300-305. [Google Scholar]
  5. Frances M, Litman A. On covering problems of codes [J]. Theory of Computing Systems, 1997, 30(2): 113-119. [CrossRef] [MathSciNet] [Google Scholar]
  6. Calderbank R, Kantor W M. The geometry of two-weight codes [J]. Bulletin of the London Mathematical Society, 1986, 18(2): 97-122. [Google Scholar]
  7. Carlet C. Boolean functions for cryptography and error-correcting codes [J]. Encyclopedia of Mathematics and Its Applications, 2016, 78(1): 5-50. [Google Scholar]
  8. Olsen J, Scholtz R, Welch L. Bent-function sequences [J]. IEEE Transactions on Information Theory, 1982, 28(6): 858-864. [CrossRef] [MathSciNet] [Google Scholar]
  9. Carlet C. Boolean and vectorial plateaued functions and APN functions [J]. IEEE Transactions on Information Theory, 2015, 61(11): 6272-6289. [CrossRef] [MathSciNet] [Google Scholar]
  10. Sun Z Q, Hu L. Boolean functions with four-valued Walsh spectra [J]. Journal of Systems Science and Complexity, 2015, 28(3): 743-754. [CrossRef] [MathSciNet] [Google Scholar]
  11. Jin W G, Du X N, Sun Y Z, et al. Boolean functions with six-valued Walsh spectra and their application [J]. Cryptography and Communications, 2021, 13(5): 393-405. [Google Scholar]
  12. Xu G K, Cao X W, Xu S D. Several new classes of Boolean functions with few Walsh transform values [J]. Applicable Algebra in Engineering Communication and Computing, 2017, 28(2): 155-176. [Google Scholar]
  13. Tang C M, Zhou Z C, Qi Y F, et al. Generic construction of bent functions and bent idempotents with any possible algebraic degrees [J]. IEEE Transactions on Information Theory, 2017, 63(10): 6149-6157. [CrossRef] [MathSciNet] [Google Scholar]
  14. Mesnager S. Several new infinite families of bent functions and their duals [J]. IEEE Transactions on Information Theory, 2014, 60(7): 4397-4407. [CrossRef] [MathSciNet] [Google Scholar]
  15. Pang T T, Li N, Zhang L, et al. Several new classes of (balanced) Boolean functions with few Walsh transform values [J]. Advances in Mathematics of Communications, 2021, 15(4): 757-775. [Google Scholar]
  16. Wu G F, Li N, Zhang Y Q, et al. Several classes of negabent functions over finite fields [J]. Science China. Information Sciences, 2018, 61(3): 1-3. [CrossRef] [Google Scholar]

Current usage metrics show cumulative count of Article Views (full-text article views including HTML views, PDF and ePub downloads, according to the available data) and Abstracts Views on Vision4Press platform.

Data correspond to usage on the plateform after 2015. The current usage metrics is available 48-96 hours after online publication and is updated daily on week days.

Initial download of the metrics may take a while.