On the pseudorandom properties of d-ary generalized two-prime Sidelnikov sequences

Shimeng SHEN , Huaning LIU

Front. Math. China ›› 2023, Vol. 18 ›› Issue (5) : 341 -351.

PDF (355KB)
Front. Math. China ›› 2023, Vol. 18 ›› Issue (5) : 341 -351. DOI: 10.3868/s140-DDD-023-0028-x
RESEARCH ARTICLE

On the pseudorandom properties of d-ary generalized two-prime Sidelnikov sequences

Author information +
History +
PDF (355KB)

Abstract

Let p and q be two distinct odd primes and let d=(p1,q1). In this paper, we construct d-ary generalized two-prime Sidelnikov sequences and study the autocorrelation values and linear complexity.

Keywords

Two-prime sequence / Sidelnikov sequence / character sum / autocorrelation value / linear complexity

Cite this article

Download citation ▾
Shimeng SHEN, Huaning LIU. On the pseudorandom properties of d-ary generalized two-prime Sidelnikov sequences. Front. Math. China, 2023, 18(5): 341-351 DOI:10.3868/s140-DDD-023-0028-x

登录浏览全文

4963

注册一个新账户 忘记密码

1 Introduction

Sequences with good pseudorandom properties play an important role in communication and cryptography, and many of them with these properties sequences are constructed based on multiplicative features in finite fields [18, 19]. For example, the well-known Legendre sequence is based on the quadratic feature of finite field For example, the famous Legendre sequence is constructed based on the quadratic identity of the finite field storage (p is prime) and has been shown to have high linear complexity and good pseudorandomness [3, 5].

Another well-known sequence is the Sidelnikov sequence which has been shown to have good periodic autocorrelation values [8, 9]. Based on these two constructions, more good pseudo-random sequences such as double prime sequences have been proposed and shown to have good autocorrelation values [2]. Secondly, for Legendre-Sidelnikov sequence which is based on the Legendre sequence with period p and the Sidelnikov sequence with period q1, Su and Winterhof [16] gives the periodic autocorrelation values of the Legendre–Sidelnikov sequence and the correlation values of upper bounds for the acyclic autocorrelation function. While literature [15] and [17] studied the linear complexity of the sequence, respectively, giving the upper and lower bounds on the linear complexity under different conditions. Correlational studies are also available in [13, 14, 20].

Brandstiitter et al. [1] defined the dual prime Sidelnikov sequence by combining the properties of the cut circle sequence with those of the Sidelnikov sequence.

Specifically, let p and q be two distinct odd prime numbers and g be a common primitive root of modulo p and modulo q. Let d=(p1,q1), t=(p1)(q1)/d, Q={q,2q,,<(p1)q}, Q0=Q{0} and p={p,2p,,(q1)p}. Then store on the biserial Sidelnikov sequence (sn) with period t is defined as

sn={0,(gn+1)modpqQ0,1,(gn+1)modpqP,1(gn+1p)(gn+1q)2,(gn+1,pq)=1,

where (p) and (q) denote the Legendre symbols of mod p and mod q, respectively. Literature [1] gives the autocorrelation function for the sequence (0.1).

Literature [21] improves the upper bound estimate of the autocorrelation value of this sequence for d = 2. Literature [7] introduces an improved binary biserial Sidelnikov sequence:

sn={1,gn+10(modpq),1(gn+1q)2,(gn+1)modpqP,1(gn+1p)2,(gn+1)modpqQ,1(gn+1p)(gn+1q)2,(gn+1,pq)=1,

and proves that the sequence is equilibrium in addition to calculating its autocorrelation value. Related works can also be found in [4, 6, 11].

In this paper, we will construct a d-element bi-prime Sidelnikov sequence based on multiplicative features and study its autocorrelation value with linear complexity set integer d2, prime p1 (modd), w is a d-dimensional unit root, and g is the original root of mod p defined by

χp(g)=w,χp(0)=0.

And for nFp, let ngj mod (d), 0jp2,

χp(n)=χp(gj)=wj.

From the above, we can obtain a d-order multiplicative identity χp for mod p.

Let the odd prime p1 (modd). Similarly, we can obtain a d-order multiplicative identity χp(gj)=wj and χp(0)=0. The methodological identity χq satisfying χp(gj)=wj, χp(0)=0 and t=(p1)(q1)d defines a d-element generalized dual prime of period t Sidelnikov sequence as follows:

sn={1,gn+10(modpq),logωχq(gn+1),(gn+1)modpqP,logωχp(gn+1),(gn+1)modpqQ,logω(χp(gn+1)χq(gn+1)),(gn+1,pq)=1,

where logω()is the discrete logarithm on Zd with w as the base.

In this paper, the autocorrelation value and linear complexity of this sequence are investigated in Section 2 and Section 3, respectively, using the properties of the characteristic sum. The findings show that the sequence has a small autocorrelation value and a high linear complexity, and thus has potential applications in coding and cryptography.

2 Autocorrelation value

For a d-element sequence (sn) with period N(sn)(0nN1), the periodic autocorrelation function is defined as

AC(sn,l)=n=0N1ωsnsn+l,

where 1lN1,ω is the dth unit root. If (sn) is a pseudo-random sequence, then |AC(sn,l)| is an infinite small plant about N.

This section will study the autocorrelation value of the d-measure sequence defined in (1.3). When l0(modp1)orl0(modq1), the exact value of AC(sn,l) can be obtained.

Theorem 2.1  Let (sn) be defined as in (1.3). When l0(modp1), if pq3(mod4), then

AC(sn,l)=(p1d1+ω)χq1(gl+1)+(p1d1+ω1)χq(gl+1)+p1d(χq1(gl)1).

When pq(mod 4), then

AC(sn,l)=p1d(χq1(gl+1)+χq(gl+1)χq1(gl)1).

When l0(modq1), if pq3(mod4), then

AC(sn,l)=(q1d1+ω)χp1(gl+1)+(q1d1+ω1)χp(gl+1)+q1d(χp1(gl)1).

When pq(mod 4), then

AC(sn,l)=q1d(χp1(gl+1)+χp(gl+1)χp1(gl)1).

Proof Due to the symmetry of p and q, we prove only the case of l0(modq1), i.e., (2.1) and (2.2).

It is easy to prove that gn+10(modpq) if and only if pq3(mod4), and when gn+10(modpq), there must be gn+l+1P. Futher more, when gn+1P, there is gn+l+1P{0}. By (1.3), we have

ωsnsn+l={ωχq1(gl+1),gn+10(modpq),gn+l+1P,ω1χq(gl+1),gn+1P,gn+l+10(modpq),χq(gn+1)χq1(gn+l+1),gn+1P,gn+l+1P,χq1(gl+1),gn+1Q,gn+l+1Zpq,χq(gl+1),gn+1Zpq,gn+l+1Q,χq(gn+1)χq1(gn+l+1),gn+1Zpq,gn+l+1Zpq.

The following two scenarios are used to calculate AC(sn,l).

Case l Assume that pq3(mod4). From (2.5), we have

AC(sn,l)=n=0t1ωsnsn+l=ωχq1(gl+1)+ω1χq(gl+1)+n=0gn+1Qgn+l+1Zpqt1χq1(gl+1)+n=0gn+1Zpqgn+l+1Qt1χq(gl+1)+n=0gn+1Pgn+l+1Pt1χq(gn+1)χq1(gn+l+1)+n=0gn+1Zpqgn+l+1Zpqt1χq(gn+1)χq1(gn+l+1)=ωχq1(gl+1)+ω1χq(gl+1)+n=0gn+1Qt1χq1(gl+1)+n=0gn+l+1Qt1χq(gl+1)+n=0gn+1Pt1χq(gn+1)χq1(gn+l+1)+n=0gn+1Zpqt1χq(gn+1)χq1(gn+l+1)=ωχq1(gl+1)+ω1χq(gl+1)

+p1ddχq1(gl+1)+p1ddχq(gl+1)+n=0t1χq(gn+1)χq1(gn+l+1).

From the properties of the identity and the residual system, we have

n=0t1χq(gn+1)χq1(gn+l+1)=n1=0p1d1n2=0q2χq(gn1(q1)+n2p1d+1)χq1(gn1(q1)+n2p1d+l+1)=p1dn2=0q2χq(gn2+1)χq1(gn2+l+1)=p1dn3=1q1χq(n3+1)χq1(gln3+1)=p1dn4=2q1χq(n4)χq1(gln4+1gl)=p1d(n4=1q1χq1(gl+(1gl)n41)1)=p1d(n4=1q1χq1(gl+n4)1)=p1d(χq1(gl)1).

Thus, combining (2.6) with (2.7), we have

AC(sn,l)=(p1d1+ω)χq1(gl+1)+(p1d1+ω1)χq(gl+1)+p1d(χq1(gl)1).

Case 2 Assume that pq(mod4). From (2.5) and (2.7), we have

AC(sn,l)=n=0t1ωsnsn+l=n=0gn+1Qgn+l+1Zpqt1χq1(gl+1)+n=0gn+1Zpqgn+l+1Qt1χq(gl+1)+n=0gn+1Pgn+l+1Pt1χq(gn+1)χq1(gn+l+1)+n=0gn+1Zpqgn+l+1Zpqt1χq(gn+1)χq1(gn+l+1)=gn+1Qn=0t1χq1(gl+1)+gn+l+1Qn=0t1χq(gl+1)

+gn+1Pn=0t1χq(gn+1)χq1(gn+l+1)+gn+1Zpqn=0t1χq(gn+1)χq1(gn+l+1)=p1dχq1(gl+1)+p1dχq(gl+1)+n=0t1χq(gn+1)χq1(gn+l+1)=p1d(χq1(gl+1)+χq(gl+1)χq1(gl)1).

Theorem 2.1 is proved.□

The |AC(sn,l)| can be given when l0(modp1)andl0(modq1), and we need the following upper bound estimate for the sum of characteristics.

Lemma 2.1 [10, Lemma 2]  Let p be a prime number and χ be a non-principal characteristic of dth-order modulo p. Let f(x)Fp[x], and cannot be tabulated as Fp on any polynomial of constant multiples of the dth curtain. Then for any aZ, there is

|nFpχ(f(n))e(anp)|sp12,

where e(y)=e2πiy, s is the number of different roots of the polynomial f on F¯p.

Theorem 2.2  Let (sn) be as defined in (1.3). When l0(modp1) with l0(modq1),

AC(sn,l)p12q12+p+q.

Proof From (1.3), we have

AC(sn,l)=n=0t1ωsnsn+l=n=0t1χp(gn+1)χp1(gn+l+1)χq(gn+1)χq1(gn+l+1)+O(p+q)=n1=0p2n2=0q1d1χp(gn1q1d+n2(p1)+1)χp1(gn1q1d+n2(p1)+l+1)×χq(gn1q1d+n2(p1)+1)χq1(gn1q1d+n2(p1)+l+1)+O(p+q)=n1=0p2n2=0q1d1χp(gn1q1d+1)χp1(gn1q1d+l+1)×χq(gn1q1d+n2(p1)+1)χq1(gn1q1d+n2(p1)+l+1)+O(p+q).

When n2 is taken from 0 to q1d1, gn2(p1) is taken over the dth residue of modulo q. Thus,

AC(sn,l)=n1=0p2χp(gn1q1d+1)χp1(gn1q1d+l+1)×n2=1q1χq(gn1q1dn2+1)χq1(gn1q1dn2+1)1dk=0d1χqk(n2)+O(p+q)=1dk=0d1n1=0p2χp(gn1q1d+1)χp1(gn1q1d+1)χqk(gn1q1d)×n2=1q1χq(n2+1)χq1(gln2+1)χqk(n2)+O(p+q).

Note that χp(g)=χq(g)=ω, therefore,

χqk(gn1q1d)=χpk(gn1q1d).

Thus, we have

AC(sn,l)=1dk=0d1n1=0p2χp(gn1q1d+1)χp1(gn1q1d+1)χpk(gn1q1d)×n2=1q1χq(n2+1)χq1(gln2+1)χqk(n2)+O(p+q)=1dk=0d1n1=1p1χp(n1+1)χp1(gln1+1)χpk(n1)×n2=1q1χq(n2+1)χq1(gln2+1)χqk(n2)+O(p+q)=1dk=0d1n1=1p1χp((n1+1)(gln1+1)d1n1dk)×n2=1q1χq((n2+1)(gln2+1)d1n2k)+O(p+q).

Again, from Lemma 2.1, we have

AC(sn,l)p12q12+p+q.

Theorem 2.2 is proved.□

3 Linear complexity

The linear complexity L(sn,N) of a sequence of d elements (sn) on Zd is the linear relationship for every integer N2, such that

sn+L=cL1sn+L1++c0sn,0nNL1.

The smallest positive integer L that holds for both the coding and cryptography fields requires that the linear complexity L(sn,N) must not be too small.

In this section, we study the linear complexity of the d-element sequence defined in (1.3) and give a lower bound estimate, which can be obtained as the following theorem.

Theorem 3.1  Let (sn) be as defined in (1.3). Then for any 0Nt,

L(sn,N)min{p,q,Np12q12log(pq)}.

Proof Note that L=L(sn,N). It is useful to set L<min{p,q}. Note cL=1, and set

0=cLsn+L+cL1sn+L1++c0sn,0nNL1.

Thus, from (1.3), we have

NL=n=0NL1ωcLsn+L+cL1sn+L1++c0sn=n=0NL1χp((gn+L+1)cL(gn+1)c0)χq((gn+L+1)cL(gn+1)c0)=n=0t1χp((gn+L+1)cL(gn+1)c0)χq((gn+L+1)cL(gn+1)c0)×1tm=0NL1u=0t1e(u(nm)t)=1tu=0t1m=0NL1e(umt)n=0t1χp((gn+L+1)cL(gn+1)c0)×χq((gn+L+1)cL(gn+1)c0)e(unt):=1tu=0t1m=0NL1e(umt)Γ.

Let the integer δ1,δ2 satisfy δ1q1d1(modp1),δ2p1d1(modq1). By the nature of the residual system, we have

T=n=0t1χp((gn+L+1)cL(gn+1)c0)χq((gn+L+1)cL(gn+1)c0)e(unt)=n1=0p2n2=0q1d1χp((gn1q1d+n2(p1)+L+1)cL(gn1q1d+n2(p1)+1)c0)×χq((gn1q1d+n2(p1)+L+1)cL(gn1q1d+n2(p1)+1)c0)e(u(n1q1d+n2(p1))t)=n1=0p2n2=0q1d1χp((gn1q1d+L+1)cL(gn1q1d+1)c0)e(uδ1n1q1dp1)×χq((gn1q1d+n2(p1)+L+1)cL(gn1q1d+n2(p1)+1)c0)e(uδ2indggn2(p1)q1)=n1=0p2χp((gn1q1d+L+1)cL(gn1q1d+1)c0)e(uδ1n1q1dp1)×n2=1q1χq((gn1q1d+Ln2+1)cL(gn1q1dn2+1)c0)e(uδ2indgn2q1)1dk=0d1χqk(n2)=1dk=0d1n1=0p2χp((gn1q1d+L+1)cL(gn1q1d+1)c0)e(uδ1n1q1dp1)e(uδ2n1q1dq1)×χqk(gn1q1d)n2=1q1χq((gLn2+1)cL(n2+1)c0)e(uδ2indgn2q1)χqk(n2).

Notice that

χqk(gn1q1d)=χpk(gn1q1d),e(uδ2n1q1dq1)=e(uδ1n1q1dp1).

Set

χq,(n)={e(indgq1),(n,q)=1,0,(n,q)>1,

and χq=χq,Δ,Δ=q1dm,(m,q1)=1. By Lemma 2.1, we have

T=1dk=0d1n1=1p1χp((gLn1+1)cL(n1+1)c0)χpk(n1)×n2=1q1χq((gLn2+1)cL(n2+1)c0)χq,uδ2(n2)χqk(n2)=1dk=0d1n1=1p1χp((gLn1+1)cL(n1+1)c0n1dk)

×n2=1q1χq,((gLn2+1)cLΔ(n2+1)c0Δn2uδ2n2kΔ)L2p12q12.

By combining (3.2) and (3.3), NL1tu=0t1|m=0NL1e(umt)|ΓL2p12q12log(pq). Thus, Theorem 3.1 is completely proved.□

References

[1]

Brandstätter N, Pirsic G. Correlation of the two-prime Sidelnikov sequence. Des Codes Cryptogr 2011; 59(1/3): 59–68

[2]

Brandstätter N, Winterhof A. Some notes on the two-prime generator of order 2. IEEE Trans Inform Theory 2005; 51(10): 3654–3657

[3]

Ding C. Pattern distributions of Legendre sequences. IEEE Trans Inform Theory 1998; 44(4): 1693–1698

[4]

Ding C, Helleseth T. On cyclotomic generator of order r. Inform Process Lett 1998; 66(1): 21–25

[5]

Ding C, Helleseth W. On the linear complexity of Legendre sequences. IEEE Trans Inform Theory 1998; 44(3): 1276–1278

[6]

Green D H, Green P R. Polyphase power-residue sequences. R Soc Lond Proc Ser A, Math Phys Eng Sci 2003; 459(2032): 817–827

[7]

Ke P H, Ye Z F, Zhou Z C, Shen J. Autocorrelation of the modified binary two-prime Sidelnikov sequence. Internat J Found Comput Sci 2017; 28(4): 391–409

[8]

Kim Y, Kim D, Song H. New M-ary sequence families with low correlation from the array structure of Sidelnikov sequences. IEEE Trans Inform Theory 2015; 61(1): 655–670

[9]

Kim Y, Song M, Kim D. . Properties and crosscorrelation of decimated Sidelnikov sequences. IEICE Transactions on Fundamentals of Electronics Communications & Computer Sciences 2014; E97.A(12): 2562–2566

[10]

Mauduit C, Sárközy A. On finite pseudorandom binary sequences I. Measure of pseudorandomness, the Legendre symbol. Acta Arith 1997; 82(4): 365–377

[11]

Mauduit C, Sárközy A. On finite pseudorandom sequences of k symbols. Indag Math (N S) 2002; 13(1): 89–101

[12]

SchmidtW M. Equations over Finite Fields, An Elementary Approach. Lecture Notes in Mathematics, Vol 536. Berlin: Springer-Verlag, 1976

[13]

Sidel'nikov V M. Some k-valued pseudo-random sequences and nearly equidistant codes. Problems Inform Transmission 1969; 5(1): 12–16

[14]

SuM. On the d-ary generalized Legendre-Sidelnikov sequence. In: Sequences and Their Applications SETA 2012. Lecture Notes in Comput Sci, Vol 7280. Heidelberg: Springer-Verlag, 2012, 233–244

[15]

Su M. On the linear complexity of Legendre-Sidelnikov sequences. Des Codes Cryptogr 2015; 74(3): 703–717

[16]

Su M, Winterhof A. Autocorrelation of Legendre-Sidelnikov sequences. IEEE Trans Inform Theory 2010; 56(4): 1714–1718

[17]

Su M. Correlation measure of order k and linear complexity profile of Legendre-Sidelnikov sequence. IEICE Transactions on Fundamentals of Electronics Communications & Computer Sciences 2012; E95.A(11): 1851–1854

[18]

TopuzogluAWinterhofA. Pseudorandom sequences. In: Topics in Geometry, Coding Theory and Cryptography. Algebr Appl, Vol 6. Dordrecht: Springer-Verlag, 2007, 135–166

[19]

WinterhofA. Linear complexity and related complexity measures. In: Selected Topics in Information and Coding Theory. Ser Coding Theory Cryptol, Vol 7. Hackensack, NJ: World Sci Publ, 2010, 3–40

[20]

Yan T J, Liu H D, Sun Y H. Autocorrelation of modified Legendre-Sidelnikov sequence. IEICE Transactions on Fundamentals of Electronics Communications & Computer Sciences 2015; E98.A(2): 771–775

[21]

Yue Z, Gao J T, Xie J. Autocorrelation of the two-prime sidelnikov sequence. Journal of Electronics & Information Technology 2013; 35(11): 2602–2607

RIGHTS & PERMISSIONS

Higher Education Press 2023

AI Summary AI Mindmap
PDF (355KB)

621

Accesses

0

Citation

Detail

Sections
Recommended

AI思维导图

/