Combining Evolutionary Computation and Algebraic Constructions to Find Cryptography-Relevant Boolean Functions

Boolean functions are used as nonlinear filter functions and combiner functions in several stream ciphers. The security of these stream ciphers largely depends upon cryptographic properties of Boolean functions. Finding a balanced Boolean function with optimal cryptographic properties is an open research problem in the cryptographic community. Since the number of n-variable Boolean functions is $$2^{2^n}$$ , it is not computationally feasible to search the entire space of such functions for cryptographically significant functions when $$n \ge 6$$ . In general, the construction of Boolean functions with optimal or near optimal cryptographically significant properties is formulated as combinatorial optimization problems. In this paper, we apply the Genetic algorithm with the integration of a local search procedure called hybrid GA (HGA) searching for the Boolean functions with high nonlinearity and low autocorrelation. The performance of the Genetic algorithm depends upon the tuning parameters such as crossover mechanism, mutation probability, selection criteria, and the choice of fitness/cost function. To achieve an optimal trade-off among two cryptographic properties, the choice of the cost function plays an important role for finding an optimal solution. So our main focus is to construct balanced Boolean functions using HGA with a new cost function and compare it with existing cost functions. Our experimental results shows that the HGA is more efficient than GA and the new cost function is more efficient than existing cost functions for reaching the optimal solutions.

Boolean functions with maximum algebraic immunity have been considered as one class of cryptographically significant functions. It is known that Boolean functions on odd variables have maximum algebraic immunity if and only if a correlative matrix has column full rank, and Boolean functions on even variables have maximum algebraic immunity if and only if two correlative matrices have column full rank. Recently, a smaller matrix was used in the odd case. We find that one or two smaller matrices can be used in the even case and consequently present several sufficient and necessary conditions for Boolean functions with maximum algebraic immunity. This result advances the ability to identify whether Boolean functions on even variables achieve maximum algebraic immunity. We also present a construction algorithm for n-variable Boolean functions with maximum algebraic immunity, specially with the Hamming weights of \( \sum {_{i = 0}^{\left\lceil {\frac{n} {2}} \right\rceil - 1} } \left( {\begin{array}{*{20}c} n \\ i \\ \end{array} } \right) \). It is easily realized for not too large n and helps construct balanced Boolean functions with maximum algebraic immunity on even variables. Furthermore, we present a sufficient and necessary condition for balanced Boolean functions to achieve maximum algebraic immunity and optimum algebraic degree, and modify the construction algorithm to construct Boolean functions on odd variables with maximum algebraic immunity, optimum algebraic degree and high nonlinearity.

This paper investigates the optimum OBDD representation problem based on two classes of Boolean functions. The first class is defined by OBDDs, in which the number of non-terminal nodes is equal to the number of input variables. We refer to such OBDDs and their corresponding Boolean functions as thin OBDDs and thin Boolean functions. The second class is the thin factored Boolean functions, which is defined by factored forms with each variable appearing exactly once. Many interesting properties of these two classes of functions are presented. Based on which, a revised dynamic shortest cube first OBDD variable ordering algorithm is developed. This algorithm is shown to be optimum for thin factored Boolean functions.

Several underlying structural and functional factors that determine the fault behavior of a network are not yet well understood. In this paper, we show that there exists a large class of Boolean functions, called root functions, which can never appear as faulty response in an irredundant two-level circuit even when any arbitrary multiple stuck-at faults are injected. Conversely, we show that any other Boolean function can appear as a faulty response in an irredundant realization of some root function under certain stuck-at faults. We characterize this new class of functions and show that for n variables, their number is exactly equal to the number of independent dominating sets (Harary and Livingston, Appl. Math. Lett., 1993) in a Boolean n-cube. Similar properties are observed for multiple-valued logic functions as well. Finally, we discuss its application to logic design and point out some open problems.

International audience

Two Boolean functions are affine equivalent if one can be obtained from the other by applying an affine transformation to the input variables. For a long time, there have been efforts to investigate the affine equivalence of Boolean functions. Due to the complexity of the general problem, only affine equivalence under certain groups of permutations is usually considered. Boolean functions which are invariant under the action of cyclic rotation of the input variables are known as rotation symmetric (RS) Boolean functions. Due to their speed of computation and the prospect of being good cryptographic Boolean functions, this class of Boolean functions has received a lot of attention from cryptographic researchers. In this paper, we study affine equivalence for the simplest rotation symmetric Boolean functions, called MRS functions, which are generated by the cyclic permutations of a single monomial. Using Pólya’s enumeration theorem, we compute the number of equivalence classes, under certain large groups of permutations, for these MRS functions in any number

Substitution boxes (S-boxes) are often used as the most important nonlinear components in many symmetric encryption algorithms. The cryptographic properties of an S-box directly affect the security of the whole cipher system. Recently, generalized global avalanche characteristics (GGAC) were introduced to measure the correlation between two arbitrary Boolean functions. In this paper, to better evaluate the security of an S-box, we present two cross-correlation indicators for it. In addition, by studying the related properties of the cross-correlation between two balanced Boolean functions, we propose the lower bounds on the sum-of-squares indicator related to GGAC for two balanced functions and also for an S-box.

Boolean functions can be used in Cryptography (especially, the global avalanche characteristics of one Boolean function is an important property in symmetric Cipher). In this paper, when an n-variable balanced Boolean function satisfies the minimum the sum-of-squares indicator, we give some new properties of \({(n-1)}\)-variable decomposition Boolean functions. Meanwhile, we derive a new condition on the sum-of-squares indicator, if the sum-of-squares indicator of a balanced Boolean function with n-variable is greater than \({2^{2n}+2^{n+3}}\) for \({n\ge 3}\).

In this paper, we study the lower bound on the sum-of-square indicator of balanced Boolean functions obtained by Son, et al. in 1998, and give a sufficient and necessary condition under which balanced Boolean functions achieve this lower bound. We introduce a new general class of balanced Boolean functions in $n$ variables $(n\geq 4)$ with optimal auto-correlation distribution, and we study two sub-classes more explicitely. Finally, we study the sets of Boolean functions having a same auto-correlation distribution, and derive a lower bound on the number of elements in such set.

The number and probability of canalizing functions

The class of affine Boolean functions is rich enough to express constant bits and dependencies between different bits of different words. For example, the function (x0) ∧ (¬y1) ∧ (x4 ⇔ y7) ∧ (x5 ⇔ ¬y9) is affine and expresses the invariant that the low bit (bit 0) of the variable x is true, that bit 1 of y is false, that the bits 4 and 7 of x and y coincide whereas bits 5 and 9 of x and y differ. This class of Boolean function is amenable to bit-precise reasoning since it satisfies strong chain properties which bound the number of times a system of semantic fixpoint equations need to be reapplied when reasoning about loops. This paper address the key problem of abstracting an arbitrary Boolean function to either a general affine function or a so-called affine function of width 2, when the function is represented as an ROBDD. Novel algorithms are presented for this task: one that manipulates Boolean vectors and another which is inspired by anti-unification. The speed and precision of both algorithms are compared on benchmark circuits, to draw conclusions on the tractability of affine abstraction.

Given a positive integer n, let and . The generator matrix of the kth-order Reed–Muller code RM is an important tool in the study of Boolean functions' algebraic immunity. In this paper, choosing the last s column vectors in as a basis of the vector space , we study the values of the coefficients in the linear expressions of 's column vectors over this basis. As an application, we present a new construction of balanced even-variable Boolean functions on with optimal algebraic immunity by modifying the outputs of majority function. The nonlinearities of these constructed functions are also determined.

We improve the steepest descent algorithm and increase the double threshold parameter, which significantly improves the algorithm’s efficiency. And we design a new cost function so that in terms of search, various characteristics of Boolean functions can be taken into account simultaneously. Applying our algorithm, there are excellent results regarding the 9, 10, 11, and 12 variables. We find a Boolean function with a nonlinearity of 242 in 9 variables and the whole search space. Previously, this result only appeared in the rotational symmetry class. The best-achieved nonlinearity result for permutation (6, 5, 1, 4, 7, 2, 3, 0, 8) and (0, 7, 2, 5, 4, 1, 3, 6, 8) class is 238 and 239 introduced by Kavut in Information and Computation (2010). Still, applying our algorithm, we obtain a balanced Boolean function with a nonlinearity of 240 under the same permutation, indicating that our method is more general. Among the 11 variables, a Boolean function with a higher nonlinearity and a lower transparency level and the absolute value spectrum are maintained at a lower level. The algorithm performs well when considering all aspects of the property. There are similarly promising results in even-numbered variables.

Boolean functions possessing multiple cryptographic criteria play an important role in the design of symmetric cryptosystems. The following criteria for cryptographic Boolean functions are often considered: high nonlinearity, balancedness, strict avalanche criterion, and global avalanche characteristics. The trade-off among these criteria is a difficult problem and has attracted many researchers. In this paper, two construction methods are provided to obtain balanced Boolean functions with high nonlinearity. Besides, the constructed functions satisfy strict avalanche criterion and have good global avalanche characteristics property. The algebraic immunity of the constructed functions is also considered.

It is a difficult task to compute the r-th order nonlinearity of a given function with algebraic degree strictly greater than r > 1. Though lower bounds on the second order nonlinearity are known only for a few particular functions, the majority of which are cubic. We investigate lower bounds on the second order nonlinearity of cubic Boolean functions [Formula: see text], where [Formula: see text], dl = 2il + 2jl + 1, m, il and jl are positive integers, n > il > jl. Furthermore, for a class of Boolean functions [Formula: see text] we deduce a tighter lower bound on the second order nonlinearity of the functions, where [Formula: see text], dl = 2ilγ + 2jlγ + 1, il > jl and γ ≠ 1 is a positive integer such that gcd(n,γ) = 1. Lower bounds on the second order nonlinearity of cubic monomial Boolean functions, represented by fμ(x) = Tr(μx2i+2j+1), [Formula: see text], i and j are positive integers such that i > j, were obtained by Gode and Gangopadhvay in 2009. In this paper, we first extend the results of Gode and Gangopadhvay from monomial Boolean functions to Boolean functions with more trace terms. We further generalize and improve the results to a wider range of n. Our bounds are better than those of Gode and Gangopadhvay for monomial functions fμ(x). Especially, our lower bounds on the second order nonlinearity of some Boolean functions F(x) are better than the existing ones.