2022/03/27 by Luca Mariot, Mariot, Luca, Luca Manzoni +1
Computer Science · #Cellular Automata and Applications #Coding theory and cryptography #Combinatorics (math.CO) #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #FOS: Mathematics #Formal Languages and Automata Theory (cs.FL) #Quantum-Dot Cellular Automata
paper · pdf · doi:10.48550/arxiv.2203.14365
openalex publication_date 2022/03/27 · openalex created_date 2022/04/03 · openalex updated_date 2026/08/04
We investigate S-boxes defined by pairs of Orthogonal Cellular Automata (OCA), motivated by the fact that such CA always define bijective vectorial Boolean functions, and could thus be interesting for the design of block ciphers. In particular, we perform an exhaustive search of all nonlinear OCA pairs of diameter d=4 and d=5, which generate S-boxes of size 6× 6 and 8× 8, respectively. Surprisingly, all these S-boxes turn out to be linear, and thus they are not useful for the design of confusion layers in block ciphers. However, a closer inspection of these S-boxes reveals a very interesting structure. Indeed, we remark that the linear components space of the OCA-based S-boxes found by our exhaustive search are themselves the kernels of linear CA, or, equivalently, polynomial codes. We finally classify the polynomial codes of the S-boxes obtained in our exhaustive search and observe that, in most cases, they actually correspond to the cyclic code with generator polynomial Xb+1, where b=d-1. Although these findings rule out the possibility of using OCA to design good S-boxes in block ciphers, they give nonetheless some interesting insights for a theoretical characterization of nonlinear OCA pairs, which is still an open question in general.