cronokirby

(2026-02) A Generalized -chi_n-Function

2026-02-10

Abstract

The mapping χn\chi_n from F2n\mathbb{F}_{2}^{n} to itself defined by y=χn(x)y=\chi_n(x) with yi=xi+xi+2(1+xi+1)y_i=x_i+x_{i+2}(1+x_{i+1}), where the indices are computed modulo nn, has been widely studied for its applications in lightweight cryptography. However, χn\chi_n is bijective on F2n\mathbb{F}_2^n only when nn is odd, restricting its use to odd-dimensional vector spaces over F2\mathbb{F}_2. To address this limitation, we introduce and analyze the generalized mapping χn,m\chi_{n, m} defined by y=χn,m(x)y=\chi_{n,m}(x) with yi=xi+xi+m(xi+m1+1)(xi+m2+1)(xi+1+1)y_i=x_i+x_{i+m} (x_{i+m-1}+1)(x_{i+m-2}+1) \cdots (x_{i+1}+1), where mm is a fixed integer with mnm\nmid n. To investigate such mappings, we further generalize χn,m\chi_{n,m} to θm,k\theta_{m, k}, where θm,k\theta_{m, k} is given by yi=xi+mkj=1,mjmk1(xi+j+1),fori{0,1,,n1}y_i=x_{i+mk} \prod_{\substack{j=1,\,\, m \nmid j}}^{mk-1} \left(x_{i+j}+1\right), \,\,{\rm for }\,\, i\in \{0,1,\ldots,n-1\}. We prove that these mappings generate an abelian group isomorphic to the group of units in F2[z]/(zn/m+1)\mathbb{F}_2[z]/(z^{\lfloor n/m\rfloor +1}). This structural insight enables us to construct a broad class of permutations over F2n\mathbb{F}_2^n for any positive integer nn, along with their inverses. We rigorously analyze algebraic properties of these mappings, including their iterations, fixed points, and cycle structures. Additionally, we provide a comprehensive database of the cryptographic properties for iterates of χn,m\chi_{n,m} for small values of nn and mm. Finally, we conduct a comparative security and implementation cost analysis among χn,m\chi_{n,m}, χn\chi_n, χχn\chi\chi_n and their variants, and prove Conjecture 1 proposed in [Belkheyar et al., 2025] as a by-product of our study. Our results lead to generalizations of χn\chi_n, providing alternatives to χn\chi_n and χχn\chi\chi_n.