On APN Functions with Boomerang Uniformity One over F 3 n: Differential and Boomerang Spectra and CCZ-Inequivalence
cs.CR
Submitted: 2026-09-08
Updated: 2026-09-08
Comments: 37 pages
License: http://creativecommons.org/licenses/by/4.0/
The gist: Let q=3 n, where n>1 is odd, and let g: to be a perfect nonlinear (PN) function represented by a Dembowski--Ostrom (DO) polynomial.
Abstract
Let q=3 n, where n>1 is odd, and let g: to be a perfect nonlinear (PN) function represented by a Dembowski--Ostrom (DO) polynomial. Put τ=g(1), let ε be the indicator of*, and, for c in, define G c(x):=g(x+c)+τε(x). We prove that every G c is APN and has boomerang uniformity either one or two. More precisely, [ β G c=1 c in C g :=c in:g(c)+τ g, C g= q-3 over 2,] whereas β G c=2 for the remaining (q+3)/2 parameters. We determine the common differential spectrum and complete boomerang spectra of all the functions G c. Since boomerang uniformity one is the least possible for an APN function over a finite field of odd characteristic, this gives, to the best of our knowledge, the first general construction yielding infinite families of APN functions attaining this optimum. This common differential spectrum rules out CCZ equivalence with every power function and every Ness--Helleseth-type binomial. We also prove that CCZ equivalence between sign-switches of DO PN functions forces EA equivalence between the original PN functions. Using the orders of the nuclei of the associated presemifields, we exhibit, for infinitely many odd n, three pairwise CCZ-inequivalent PN functions over 3 n, one from each of the Gold f 1, Ding--Yuan f 3, and Bierbrauer f 5 families. Consequently, over each such field, our construction produces three pairwise CCZ-inequivalent APN functions with boomerang uniformity one. The smallest extension degree obtained in this way is n=45.
Related papers
- SoK: AI-Augmented Binary Reversing
- Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
- Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
- Efficient Fuzzy PSI under One-Sided Assumptions
- Sealing the Audit-Runtime Gap for LLM Skills
- Token Composition: A Graph Based on EVM Logs