Counting Boolean functions with faster points

Abstract

AbstractDuan and Lai introduced the notion of “fast point” for a Boolean function f as being a direction a so that the algebraic degree of the derivative of f in direction a is strictly lower than the expected $$\deg (f)-1$$ deg ( f ) - 1 . Their study was motivated by the fact that the existence of fast points makes many cryptographic differential attacks (such as the cube and AIDA attack) more efficient. The number of functions with fast points was determined by Duan et al. in some special cases and by Sălăgean and Mandache-Sălăgean in the general case. We generalise the notion of fast point, defining a fast point of order $$\ell $$ ℓ as being a fast point a so that the degree of the derivative of f in direction a is lower by at least $$\ell $$ ℓ than the expected degree. We determine an explicit formula for the number of functions of degree d in n variables which have fast points of order $$\ell $$ ℓ . Furthermore, we determine the number of functions of degree d in n variables which have a given number of fast points of order $$\ell $$ ℓ , and also the number of functions which have a given profile in terms of the number of fast points of each order. We apply our results to compute the probability of a function to have fast points of order $$\ell $$ ℓ . We also compute the number of functions which admit linear structures (i.e. their derivative in a certain direction is constant); such functions have a long history of being used in the analysis of symmetric ciphers.