Fermat-Euler quotients arose from the study of the first case of Fermat's Last Theorem, and have numerous applications in number theory. Recently they were studied from the cryptographic aspects by constructing many pseudorandom binary sequences, whose linear complexities and trace representations were calculated. In this work, we further study their correlation measures by introducing a new approach based on Dirichlet characters, Ramanujan sums and Gauss sums. Our results show that the 4-order correlation measures of these sequences are very large. Therefore they may not be suggested for cryptography.
Citation: Huaning Liu, Zhixiong Chen, Chenhuang Wu. Correlation measures of binary sequences derived from Euler quotients[J]. AIMS Mathematics, 2022, 7(6): 11087-11101. doi: 10.3934/math.2022619
[1] | Yuchan Qi, Huaning Liu . Binary sequences and lattices constructed by discrete logarithms. AIMS Mathematics, 2022, 7(3): 4655-4671. doi: 10.3934/math.2022259 |
[2] | Kenan Doğan, Murat Şahin, Oğuz Yayla . Families of sequences with good family complexity and cross-correlation measure. AIMS Mathematics, 2025, 10(1): 38-55. doi: 10.3934/math.2025003 |
[3] | Jianying Rong, Ting Li, Rui Hua, Xuemei Wang . A class of binary sequences with two-valued cross correlations. AIMS Mathematics, 2024, 9(4): 9091-9106. doi: 10.3934/math.2024442 |
[4] | Vladimir Edemskiy, Chenhuang Wu . On the k-error linear complexity of binary sequences of periods pn from new cyclotomy. AIMS Mathematics, 2022, 7(5): 7997-8011. doi: 10.3934/math.2022446 |
[5] | Ling Zhu . Asymptotic expansion of a finite sum involving harmonic numbers. AIMS Mathematics, 2021, 6(3): 2756-2763. doi: 10.3934/math.2021168 |
[6] | Robert Reynolds . A short note on a extended finite secant series. AIMS Mathematics, 2023, 8(11): 26882-26895. doi: 10.3934/math.20231376 |
[7] | Zhao Xiaoqing, Yi Yuan . Square-free numbers in the intersection of Lehmer set and Piatetski-Shapiro sequence. AIMS Mathematics, 2024, 9(12): 33591-33609. doi: 10.3934/math.20241603 |
[8] | Yixin Ren, Huaning Liu . On the correlation of k symbols. AIMS Mathematics, 2024, 9(8): 21455-21470. doi: 10.3934/math.20241042 |
[9] | Tongjiang Yan, Pazilaiti Ainiwaer, Lianbo Du . On the 1-error linear complexity of two-prime generator. AIMS Mathematics, 2022, 7(4): 5821-5829. doi: 10.3934/math.2022322 |
[10] | Tariq Mahmood, Liaqat Ali, Muhammad Aslam, Ghulam Farid . On commutativity of quotient semirings through generalized derivations. AIMS Mathematics, 2023, 8(11): 25729-25739. doi: 10.3934/math.20231312 |
Fermat-Euler quotients arose from the study of the first case of Fermat's Last Theorem, and have numerous applications in number theory. Recently they were studied from the cryptographic aspects by constructing many pseudorandom binary sequences, whose linear complexities and trace representations were calculated. In this work, we further study their correlation measures by introducing a new approach based on Dirichlet characters, Ramanujan sums and Gauss sums. Our results show that the 4-order correlation measures of these sequences are very large. Therefore they may not be suggested for cryptography.
Let S=(s0,s1,...,sT−1) be a binary sequence over F2={0,1} and ℓ a positive integer. Mauduit and Sárközy [16] introduced the correlation measure of order ℓ for S, which is defined as
Cℓ(S)=maxU,D|U−1∑n=0(−1)sn+d1+sn+d2+…+sn+dℓ|, |
where the maximum is taken over all U∈N and D=(d1,d2,…,dℓ) with integers 0≤d1<d2<…<dℓ≤T−U.
From the viewpoint of cryptography, it is excepted that measure of order ℓ of sequences is as"small" (in terms of T, in particular, is o(T) as T→∞) as possible. Cassaigne, Mauduit and Sárközy [4] studied the values of Cℓ(S) for S∈{0,1}T chosen equiprobable. It was shown in [4] that for every integer ℓ≥2 and real ε>0, there are numbers T0=T0(ε,ℓ) and δ=δ(ε,ℓ)>0 such that for all T≥T0 we have
δ√T<Cℓ(S)<5√ℓTlogT |
with probability at least 1−ε.
Additionally, we use the following definition for the periodic correlation measure of order ℓ of S,
θℓ(S)=maxD|T−1∑n=0(−1)sn+d1+sn+d2+…+sn+dℓ|, |
where D=(d1,d2,…,dℓ) and 0≤d1<d2<…<dℓ<T. It is clear that θ2(S) is the (classic) auto-correlation of S and θℓ(S)≤Cℓ(S). Thus for every integer ℓ≥2 and real ε>0, there is number T0=T0(ε,ℓ) such that for all T≥T0 we have θℓ(S)<5√ℓTlogT with probability at least 1−ε.
In this work, we mainly consider the periodic correlation measure of order 4 for some binary sequences derived from Euler quotients studied recently.
Let p be a prime and let n be an integer with gcd(n,p)=1. From Fermat's little theorem we know that np−1≡1 (mod p). Then the Fermat quotient Qp(n) is defined as
Qp(n)=np−1−1p (mod p),0≤Qp(n)<p. |
We also define Qp(n)=0 if gcd(n,p)>1. Fermat quotients arose from the study of the first case of Fermat's last theorem, and have many applications in number theory (see [2,5,12,14,17,19,20,21] for details). Define the p2-periodic binary sequence ¯s=(¯s0,¯s1,⋯,¯sp2−1) by
¯st={0,if0≤Qp(t)p<12,1,if12≤Qp(t)p<1. |
The second author (partially with other co-authors) studied the well-distribution measure and correlation measure of order 2 of ¯s by using estimates for exponential sums of Fermat quotients in [11], the linear complexity of ¯s in [7,10], and the trace representation of ¯s by determining the defining pairs of all binary characteristic sequences of cosets in [6]. In [15] the first author with another co-author showed that the 4-order correlation measure of ¯s is very large.
Let m≥2 be an odd number and let n be an integer coprime to m. The Euler's theorem says that nϕ(m)≡1 (mod m), where ϕ is the Euler's totient function. Then the Euler quotient Qm(n) is defined as
Qm(n)=nϕ(m)−1m (mod m),0≤Qm(n)<m. |
We also define Qm(n)=0 if gcd(n,m)>1. Agoh, Dilcher and Skula [1] studied the detailed properties of Euler quotients. For example, from Proposition 2.1 of [1] we have
Qm(n1n2)≡Qm(n1)+Qm(n2) (mod m)forn1,n2∈Zwithgcd(n1n2,m)=1, | (1.1) |
Qm(n+cm)≡Qm(n)+cn−1ϕ(m) (mod m)forn,c∈Zwithgcd(n,m)=1. | (1.2) |
Recently many binary sequences were constructed from Euler quotients. For example, let m=pτ for a fixed number τ≥1, the pτ+1-periodic sequence ˜s=(˜s0,˜s1,⋯,˜spτ+1−1) is defined by
˜st={0,if0≤Qpτ(t)pτ<12,1,if12≤Qpτ(t)pτ<1. | (1.3) |
The linear complexity of ˜s had been investigated in [13] and the trace representation of ˜s was given in [8].
Moreover, let m=pq be an odd semiprime with p∣(q−1), the pq2-periodic sequence ˆs=(ˆs0,ˆs1,⋯,ˆspq2−1) is defined by
ˆst={0,if0≤Qpq(t)pq<12,1,if12≤Qpq(t)pq<1. | (1.4) |
Recently the minimal polynomials and linear complexities were determined in [22] for ˆs, and the trace representation of ˆs has been given in [23] provided that 2q−1≢1 (mod q2).
In this work, we shall further study the (periodic) correlation measures of ˜s and ˆs by introducing a new approach based on Dirichlet characters, Ramanujan sums and Gauss sums. We state below the main result.
Theorem 1.1. Let k≥5 be a prime and let m be an odd number with k∣m. Suppose that Qm(n) is km-periodicand the km-periodic sequence s=(s0,s1,⋯,skm−1)∈{0,1}km is defined by
st={0,if0≤Qm(t)m<12,1,if12≤Qm(t)m<1. | (1.5) |
Then there exists absolute constant δ>0 such that
km−1∑t=0(−1)st+st+m+st+2m+st+3m≥13km−δk12m(logm)4. |
The restriction k≥5 can not be relaxed since otherwise we have st=st+3m for all 0≤t≤km−1. The assumptions k∣m, k is a prime and m is odd will be vital in the proof of Lemmas 2.1 and 2.2 in Section 2. Taking special values of m and k in Theorem 1.1, we immediately get the correlation measures of ˜s and ˆs.
Corollary 1.1. Let p≥5 be a prime and let τ≥1 be a fixed integer. Let the pτ+1-periodic sequence ˜s=(˜s0,˜s1,⋯,˜spτ+1−1) be defined as in (1.3).Then we have
pτ+1−1∑t=0(−1)˜st+˜st+pτ+˜st+2pτ+˜st+3pτ≥13pτ+1−δpτ+12(logpτ)4. |
Corollary 1.2. Let p and q be two distinct odd primes with p∣(q−1) and q≥5, and letthe pq2-periodic sequence ˆs=(ˆs0,ˆs1,⋯,ˆspq2−1) be defined as in (1.4).Then we have
pq2−1∑t=0(−1)ˆst+ˆst+pq+ˆst+2pq+ˆst+3pq≥13pq2−δpq32(logpq)4. |
Our results indicate that the correlation measures of order 4 of ˜s and ˆs are very large provided that p and q are sufficiently large. Therefore these sequences are not suitable for cryptography.
To prove Theorem 1.1, we introduce basic properties of Dirichlet characters, Ramanujan sums and Gauss sums, and then prove two lemmas on the mean values of characters sums in Section 2. We express (−1)st in terms of character sums in Section 3 to finish the proof of Theorem 1.1 by using the results showed in Section 2.
We write f(n)=O(g(n)) or f(n)≪g(n) if |f(n)|≤cg(n) for some absolute constant c>0.
Let N>1 be an integer. The Ramanujan sum is denoted by
cN(n)=N−1∑t=0gcd(t,N)=1eN(tn), |
where eN(x)=e2π√−1x/N. We have
cN(n)=μ(Ngcd(n,N))ϕ(N)ϕ(Ngcd(n,N))−1, | (2.1) |
where μ is the Möbius function.
We recall that a Dirichlet character χ modulo N is a function satisfying:
(i). χ(t1t2)=χ(t1)χ(t2),
(ii). χ(t+N)=χ(t),
(iii). χ(t)=0 for gcd(t,N)>1,
(iv). χ is not identically zero.
When χ(n)=1 for all n with gcd(n,N)=1 we say χ is the trivial character modulo N. An integer d∣N is called an induced modulus for χ if χ(a)=1 whenever gcd(a,N)=1 and a≡1 (mod d). A Dirichlet character χ mod N is said to be primitive mod N if it has no induced modulus d<N. The smallest induced modulus d for χ is called the conductor of χ. Every non-trivial character χ modulo N can be uniquely written as χ=χ0χ∗, where χ0 is the trivial character modulo N and χ∗ is the primitive character modulo the conductor of χ.
For a Dirichlet character χ mod N, the Gauss sum associated with χ is defined by
G(n,χ)=N−1∑t=0χ(t)eN(tn). |
Let N∗ be the conductor for χ and let χ∗ be the induced primitive character.
Let N1 be the maximal divisor of N such that N1 and N∗ have the same prime divisors. Then we have
G(n,χ)={χ∗(ngcd(n,N))−1χ∗(NN∗gcd(n,N))μ(NN∗gcd(n,N))×ϕ(N)ϕ(Ngcd(n,N))−1G(1,χ∗), ifN∗=N1gcd(n,N1),0,ifN∗≠N1gcd(n,N1). | (2.2) |
See Chapter 8 of [3] or Chapter 1 of [18] for more details of Dirichlet characters, Ramanujan sums and Gauss sums.
Now we prove two lemmas on the mean values of characters sums.
Lemma 2.1. Let k≥5 be a prime and let m be an odd number with k∣m.Let χ be a Dirichletcharacter modulo km such that χm is trivial and χm′ is not trivialfor all 1≤m′<m. For integers a1, a2, a3 and a4 we have
km−1∑t=0χ(ta1(t+m)a2(t+2m)a3(t+3m)a4)={kϕ(m),ifm∣(a1+a2+a3+a4)andk∣(a2+2a3+3a4),O(ϕ(m)ϕ(k)−1k32),otherwise. |
Proof. Note that if k≥5, then the polynomials t, t+m, t+2m and t+3m are distinct. By the condition k∣m and the properties of residue systems we get
km−1∑t=0χ(ta1(t+m)a2(t+2m)a3(t+3m)a4)=m−1∑y=0gcd(y,m)=1k−1∑z=0χ((y+zm)a1(y+zm+m)a2(y+zm+2m)a3(y+zm+3m)a4)=m−1∑y=0gcd(y,m)=1k−1∑z=0χ((ya1+a1ya1−1zm)(ya2+a2ya2−1(z+1)m))×χ((ya3+a3ya3−1(z+2)m)(ya4+a4ya4−1(z+3)m))=m−1∑y=0gcd(y,m)=1χ(ya1+a2+a3+a4)×k−1∑z=0χ((1+a1y−1zm)(1+a2y−1(z+1)m)(1+a3y−1(z+2)m)(1+a4y−1(z+3)m)). |
By the condition k∣m we further deduce that
χ(1+(n+k)m)=χ(1+nm),χ(1+n1m)χ(1+n2m)=χ(1+(n1+n2)m), |
which show that χ(1+nm) is a non-trivial additive character modulo k. Since k is a prime, there is uniquely an integer β such that 1≤β≤k−1 and χ(1+nm)=ek(βn). Hence,
km−1∑t=0χ(ta1(t+m)a2(t+2m)a3(t+3m)a4)=m−1∑y=0gcd(y,m)=1χ(ya1+a2+a3+a4)×k−1∑z=0ek(β(a1y−1z+a2y−1(z+1)+a3y−1(z+2)+a4y−1(z+3))). |
By the orthogonality relation for additive character
N−1∑u=0eN(uθ)={N,ifN∣θ,0,ifN∤θ, | (2.3) |
we have
k−1∑z=0ek(β(a1y−1z+a2y−1(z+1)+a3y−1(z+2)+a4y−1(z+3)))=ek(β(a2+2a3+3a4)y−1)k−1∑z=0ek(βy−1(a1+a2+a3+a4)z)={kek(β(a2+2a3+3a4)y−1),ifk∣(a1+a2+a3+a4),0,ifk∤(a1+a2+a3+a4). |
Then from
km−1∑t=0χ(ta1(t+m)a2(t+2m)a3(t+3m)a4)={km−1∑y=0gcd(y,m)=1χa1+a2+a3+a4(y)ek(β(a2+2a3+3a4)y−1),ifk∣(a1+a2+a3+a4),0,ifk∤(a1+a2+a3+a4). |
Since k∣m, we know that χa1+a2+a3+a4 is a multiplicative character modulo m if k∣a1+a2+a3+a4. Then
m−1∑y=0gcd(y,m)=1χa1+a2+a3+a4(y)ek(β(a2+2a3+3a4)y−1)=m−1∑y=0gcd(y,m)=1χ−(a1+a2+a3+a4)(y)em(mkβ(a2+2a3+3a4)y) |
is a Gauss sum associated with χ−(a1+a2+a3+a4) modulo m. By the assumption χm is trivial and χm′ is not trivial for all 1≤m′<m we know that χ−(a1+a2+a3+a4) is trivial if and only if m∣a1+a2+a3+a4. Then from (2.1) and (2.2) we get
m−1∑y=0gcd(y,m)=1χ−(a1+a2+a3+a4)(y)em(mkβ(a2+2a3+3a4)y)=ϕ(m), |
if m∣(a1+a2+a3+a4) and k∣(a2+2a3+3a4), and
|m−1∑y=0gcd(y,m)=1χ−(a1+a2+a3+a4)(y)em(mkβ(a2+2a3+3a4)y)|≤{ϕ(m)ϕ(k)−1,ifm∣(a1+a2+a3+a4)andk∤(a2+2a3+3a4),0,ifm∤(a1+a2+a3+a4)andk∣(a2+2a3+3a4),ϕ(m)ϕ(k)−1k12,ifm∤(a1+a2+a3+a4)andk∤(a2+2a3+3a4). |
Therefore
km−1∑t=0χ(ta1(t+m)a2(t+2m)a3(t+3m)a4)={kϕ(m),ifm∣(a1+a2+a3+a4)andk∣(a2+2a3+3a4),O(ϕ(m)ϕ(k)−1k32),otherwise. |
Lemma 2.2. Let m be an odd number and let k be a positive integer with k≤m. Define
Ξm,k:=∑1≤|a1|,|a2|,|a3|,|a4|≤m−12a1+a2+a3+a4≡0 (modm)a2+2a3+3a4≡0 (modk)m−1∑l1=m+12em(−a1l1)m−1∑l2=m+12em(−a2l2)×m−1∑l3=m+12em(−a3l3)m−1∑l4=m+12em(−a4l4). |
Then we have
Ξm,k=148m4+O(m4(logm)3k). |
Proof. Roughly speaking, by the upper bound for exponential sum
|m−1∑l=m+12em(−al)|≤m2|a|,where1≤|a|≤m−12, | (2.4) |
we know that only the terms when |a1|,|a2|,|a3|,|a4| all are small contribute significantly to the main term in Ξm,k. Furthermore, for small enough |a1|,|a2|,|a3|,|a4| the system of congruence equations
{a1+a2+a3+a4≡0 (mod m),a2+2a3+3a4≡0 (mod k), |
is just a system of equations
{a1+a2+a3+a4=0,a2+2a3+3a4=0. |
Specifically, for absolute constant c>0 we get from (2.4) that
∑ck≤|a1|≤m−12∑1≤|a2|,|a3|,|a4|≤m−12a1+a2+a3+a4≡0 (modm)|m−1∑l1=m+12em(−a1l1)|⋅|m−1∑l2=m+12em(−a2l2)|×|m−1∑l3=m+12em(−a3l3)|⋅|m−1∑l4=m+12em(−a4l4)|≪∑1≤|a2|≤m−12m|a2|∑1≤|a3|≤m−12m|a3|∑1≤|a4|≤m−12m|a4|∑ck≤|a1|≤m−12a1+a2+a3+a4≡0 (modm)mk≪m4(logm)3k. |
By applying the above ≪ estimate directly to each of a1, a2, a3, a4 sequentially we have
Ξm,k=∑1≤|a1|,|a2|≤5k32∑1≤|a3|,|a4|≤k32a1+a2+a3+a4≡0 (modm)a2+2a3+3a4≡0 (modk)m−1∑l1=m+12em(−a1l1)m−1∑l2=m+12em(−a2l2)×m−1∑l3=m+12em(−a3l3)m−1∑l4=m+12em(−a4l4)+O(m4(logm)3k)=∑1≤|a1|,|a2|≤5k32∑1≤|a3|,|a4|≤k32a1+a2+a3+a4=0a2+2a3+3a4=0m−1∑l1=m+12em(−a1l1)m−1∑l2=m+12em(−a2l2)×m−1∑l3=m+12em(−a3l3)m−1∑l4=m+12em(−a4l4)+O(m4(logm)3k)=∑1≤|a3|,|a4|≤k32m−1∑l1=m+12em(−(a3+2a4)l1)m−1∑l2=m+12em((2a3+3a4)l2)×m−1∑l3=m+12em(−a3l3)m−1∑l4=m+12em(−a4l4)+O(m4(logm)3k). |
It is not hard to show from (2.4) that
∑k32<|a3|≤m−12∑1≤|a4|≤k32m−1∑l1=m+12em(−(a3+2a4)l1)m−1∑l2=m+12em((2a3+3a4)l2)×m−1∑l3=m+12em(−a3l3)m−1∑l4=m+12em(−a4l4)≪∑k32<|a3|≤m−12∑1≤|a4|≤k32m⋅|m−1∑l2=m+12em((2a3+3a4)l2)|⋅m|a3|⋅m|a4|≪m3k∑1≤|a4|≤k321|a4|∑k32<|a3|≤m−12|m−1∑l2=m+12em((2a3+3a4)l2)|≤m3k∑1≤|a4|≤k321|a4|∑0≤|a3|≤m−12|m−1∑l2=m+12em((2a3+3a4)l2)|=m3k∑1≤|a4|≤k321|a4|∑0≤|a3|≤m−12|m−1∑l2=m+12em(a3l2)|≪m3k⋅logk⋅mlogm≪m4(logm)2k, |
where we used the trivial bound |m−1∑l1=m+12em(−(a3+2a4)l1)|≪m. By applying the above ≪ estimate to each of a3, a4 sequentially we have
Ξm,k=∑1≤|a3|,|a4|≤m−12m−1∑l1=m+12em(−(a3+2a4)l1)m−1∑l2=m+12em((2a3+3a4)l2)×m−1∑l3=m+12em(−a3l3)m−1∑l4=m+12em(−a4l4)+O(m4(logm)3k)=∑m+12≤l1,l2,l3,l4≤m−1∑1≤|a3|≤m−12em((−l1+2l2−l3)a3)×∑1≤|a4|≤m−12em((−2l1+3l2−l4)a4)+O(m4(logm)3k)=∑m+12≤l1,l2,l3,l4≤m−1∑0≤|a3|≤m−12em((−l1+2l2−l3)a3)×∑0≤|a4|≤m−12em((−2l1+3l2−l4)a4)−∑m+12≤l1,l2,l3,l4≤m−1∑0≤|a3|≤m−12em((−l1+2l2−l3)a3)−∑m+12≤l1,l2,l3,l4≤m−1∑0≤|a4|≤m−12em((−2l1+3l2−l4)a4)+∑m+12≤l1,l2,l3,l4≤m−11+O(m4(logm)3k)=m2∑m+12≤l1,l2,l3,l4≤m−12l2≡l1+l3(modm)3l2≡2l1+l4(modm)1−m(m−1)2∑m+12≤l1,l2,l3≤m−12l2≡l1+l3(modm)1−m(m−1)2∑m+12≤l1,l2,l4≤m−13l2≡2l1+l4(modm)1+(m−1)416+O(m4(logm)3k), | (2.5) |
where we used (2.3) in the last equality.
Following the same arguments in Lemma 2.2 of [15] we have
∑m+12≤l1,l2,l3≤m−12l2≡l1+l3(modm)1=∑1≤u1,u2,u3≤m−122(u2+m−12)≡u1+m−12+u3+m−12(modm)1=∑1≤u1,u2,u3≤m−122u2≡u1+u3(modm)1=∑1≤u1,u2,u3≤m−122u2=u1+u31=∑1≤u1,u3≤m−122∣u1+u31=∑1≤u1≤m−12(m4+O(1))=m28+O(m) | (2.6) |
and
∑m+12≤l1,l2,l4≤m−13l2≡2l1+l4(modm)1=∑1≤u1,u2,u4≤m−123(u2+m−12)≡2(u1+m−12)+u4+m−12(modm)1=∑1≤u1,u2,u4≤m−122u1≡3u2−u4(modm)1=∑1≤u1,u2,u4≤m−123−m−12≤3u2−u4≤02u1=3u2−u4+m1+∑1≤u1,u2,u4≤m−121≤3u2−u4≤m2u1=3u2−u41+∑1≤u1,u2,u4≤m−12m+1≤3u2−u4≤3(m−1)2−12u1=3u2−u4−m1=∑1≤u2,u4≤m−123−m−12≤3u2−u4≤02∣3u2−u4+m1+∑1≤u2,u4≤m−121≤3u2−u4≤m2∣3u2−u41+∑1≤u2,u4≤m−12m+1≤3u2−u4≤3(m−1)2−12∣3u2−u4−m1=∑1≤u2,u4≤m−123u2≤u42∤3u2−u41+∑1≤u2,u4≤m−12u4+1≤3u2≤u4+m2∣3u2−u41+∑1≤u2,u4≤m−12u4+m+1≤3u2≤3(m−1)2+u4−12∤3u2−u41. |
By elementary calculations we get
∑1≤u2,u4≤m−123u2≤u42∤3u2−u41=∑1≤u4≤m−12∑1≤u2≤13u42∤3u2−u41=∑1≤u4≤m−12(16u4+O(1))=148m2+O(m),∑1≤u2,u4≤m−12u4+1≤3u2≤u4+m2∣3u2−u41=∑1≤u4≤m−12∑u4+13≤u2≤u4+m32∣3u2−u41=∑1≤u4≤m−12(m6+O(1))=112m2+O(m),∑1≤u2,u4≤m−12u4+m+1≤3u2≤3(m−1)2+u4−12∤3u2−u41=∑1≤u4≤m−12∑u4+m+13≤u2≤m−122∤3u2−u41=∑1≤u4≤m−12(m12−u46+O(1))=148m2+O(m). |
Hence,
∑m+12≤l1,l2,l4≤m−13l2≡2l1+l4(modm)1=148m2+112m2+148m2+O(m)=18m2+O(m). | (2.7) |
Furthermore, we have
∑m+12≤l1,l2,l3,l4≤m−12l2≡l1+l3(modm)3l2≡2l1+l4(modm)1=∑1≤u1,u2,u3,u4≤m−122(u2+m−12)≡u1+m−12+u3+m−12(modm)3(u2+m−12)≡2(u1+m−12)+u4+m−12(modm)1=∑1≤u1,u2,u3,u4≤m−122u2≡u1+u3(modm)3u2≡2u1+u4(modm)1=∑1≤u1,u2,u3,u4≤m−122u2=u1+u36u2≡4u1+2u4(modm)1=∑1≤u1,u3,u4≤m−122∣u1+u33u3−u1≡2u4(modm)1. |
For 1≤u1,u3,u4≤m−12 with 2∣u1+u3, we know that
−m−12+3≤3u3−u1≤3(m−1)2−1,2∣3u3−u1,1≤2u4≤m−1,2∣2u4. |
Then 3u3−u1≡2u4 (mod m)⟺3u3−u1=2u4. Hence,
∑m+12≤l1,l2,l3,l4≤m−12l2≡l1+l3(modm)3l2≡2l1+l4(modm)1=∑1≤u1,u3,u4≤m−122∣u1+u33u3−u1=2u41=∑1≤u1,u3≤m−122∣u1+u31≤3u3−u1≤m−11=∑1≤u1,u3≤m−122∣u1+u3u1+1≤3u3≤u1+m−11=∑1≤u1≤m−12∑u1+13≤u3≤u1+m−132∣u1+u31=∑1≤u1≤m−12(m6+O(1))=112m2+O(m). | (2.8) |
Combining (2.5)–(2.8) we immediately get
Ξm,k=m2(m212+O(m))−2⋅m(m−1)2(m28+O(m))+(m−1)416+O(m4(logm)3k)=148m4+O(m4(logm)3k). |
This completes the proof of Lemma 2.2.
Now we prove Theorem 1.1. By the orthogonality relations of additive character sums we get
st=1m∑|a|≤m−12m−1∑l=m+12em(a(Qm(t)−l)). |
Hence,
(−1)st=1−2st=−2m∑1≤|a|≤m−12m−1∑l=m+12em(−al)em(aQm(t))+1m. |
Define
χkm(n)={em(Qm(n)),ifgcd(n,m)=1,0,ifgcd(n,m)>1. |
Following from the assumption that Qm(n) is km-periodic we get χkm(n+km)=χkm(n), and by (1.1) we have
χkm(n1n2)=χkm(n1)χkm(n2). |
Then χkm(n) is a Dirichlet character modulo km such that χmkm is trivial and χm′km is not trivial for all 1≤m′<m. Therefore
(−1)st=−2m∑1≤|a|≤m−12m−1∑l=m+12em(−al)χkm(ta)+1m. | (3.1) |
By (2.4) we get
|−2m∑1≤|a|≤m−12m−1∑l=m+12em(−al)χkm(ta)|≤2m∑1≤|a|≤m−12|m−1∑l=m+12em(−al)|≤2m∑1≤|a|≤m−12m2|a|≪logm. | (3.2) |
Then from (3.1) and (3.2) we have
km−1∑t=0(−1)st+st+m+st+2m+st+3m=km−1∑t=0gcd(t,m)=1(−1)st+st+m+st+2m+st+3m+km−1∑t=0gcd(t,m)>11=km−1∑t=0gcd(t,m)=1(−2m∑1≤|a1|≤m−12m−1∑l1=m+12em(−a1l1)χkm(ta1)+1m)×(−2m∑1≤|a2|≤m−12m−1∑l2=m+12em(−a2l2)χkm((t+m)a2)+1m)×(−2m∑1≤|a3|≤m−12m−1∑l3=m+12em(−a3l3)χkm((t+2m)a3)+1m)×(−2m∑1≤|a4|≤m−12m−1∑l4=m+12em(−a4l4)χkm((t+3m)a4)+1m)+km−1∑t=0gcd(t,m)>11=24m4∑1≤|a1|≤m−12m−1∑l1=m+12em(−a1l1)∑1≤|a2|≤m−12m−1∑l2=m+12em(−a2l2)×∑1≤|a3|≤m−12m−1∑l3=m+12em(−a3l3)∑1≤|a4|≤m−12m−1∑l4=m+12em(−a4l4)×km−1∑t=0χkm(ta1(t+m)a2(t+2m)a3(t+3m)a4)+km−1∑t=0gcd(t,m)>11+O(k(logm)3). | (3.3) |
Combining (2.4), (3.3), Lemmas 2.1 and 2.2 we get
km−1∑t=0(−1)st+st+m+st+2m+st+3m=24kϕ(m)m4∑1≤|a1|,|a2|,|a3|,|a4|≤m−12a1+a2+a3+a4≡0 (modm)a2+2a3+3a4≡0 (modk)m−1∑l1=m+12em(−a1l1)m−1∑l2=m+12em(−a2l2)×m−1∑l3=m+12em(−a3l3)m−1∑l4=m+12em(−a4l4)+O(1m4(∑1≤|a|≤m−12|m−1∑l=m+12em(−al)|)4ϕ(m)ϕ(k)−1k32)+km−1∑t=0gcd(t,m)>11+O(k(logm)3)=km−23kϕ(m)+O(k12m(logm)4). |
Then there exists absolute constant δ>0 such that
km−1∑t=0(−1)st+st+m+st+2m+st+3m≥13km−δk12m(logm)4. |
This proves the result.
In this work, we have claimed that two families of binary sequences (see (1.3) and (1.4)) studied in the past several years have 'large' values on the correlation measures of order 4. They would be very vulnerable if used in cryptography.
It seems interesting to consider the case when the full peaks on the periodic correlation measure of these sequences appear, i.e., their periodic correlation measure of order ℓ equals to the period, see [9]. Such problem may be related to their linear complexity.
H. Liu was partially supported by National Natural Science Foundation of China under Grant No. 12071368, and the Science and Technology Program of Shaanxi Province of China under Grant No. 2019JM-573 and 2020JM-026.
Z. Chen and C. Wu were partially supported by the Provincial Natural Science Foundation of Fujian under grant No. 2020J01905, by the Science and Technology Project of Putian City under grant No. 2021R4001-10, and by the Putian Univ. under grant No. PTU-P-61772292.
The authors declared that they have no conflicts of interest to this work.
[1] |
T. Agoh, K. Dilcher, L. Skula, Fermat quotients for composite moduli, J. Number Theory, 66 (1997), 29–50. https://doi.org/10.1006/jnth.1997.2162 doi: 10.1006/jnth.1997.2162
![]() |
[2] |
H. Aly, A. Winterhof, Boolean functions derived from Fermat quotients, Cryptogr. Commun., 3 (2011), 165–174. https://doi.org/10.1007/s12095-011-0043-5 doi: 10.1007/s12095-011-0043-5
![]() |
[3] | T. Apostol, Introduction to analytic number theory, New York: Springer, 1976. https://doi.org/10.1007/978-1-4757-5579-4 |
[4] |
J. Cassaigne, C. Mauduit, A. Sárközy, On finite pseudorandom binary sequences vii: the measures of pseudorandomness, Acta Arith., 103 (2002), 97–118. https://doi.org/10.4064/aa103-2-1 doi: 10.4064/aa103-2-1
![]() |
[5] |
M. Chang, Short character sums with Fermat quotients, Acta Arith., 152 (2012), 23–38. https://doi.org/10.4064/aa152-1-3 doi: 10.4064/aa152-1-3
![]() |
[6] |
Z. Chen, Trace representation and linear complexity of binary sequences derived from Fermat quotients, Sci. China Inf. Sci., 57 (2014), 1–10. https://doi.org/10.1007/s11432-014-5092-x doi: 10.1007/s11432-014-5092-x
![]() |
[7] |
Z. Chen, X. Du, On the linear complexity of binary threshold sequences derived from Fermat quotients, Des. Codes Cryptogr., 67 (2013), 317–323. https://doi.org/10.1007/s10623-012-9608-3 doi: 10.1007/s10623-012-9608-3
![]() |
[8] |
Z. Chen, X. Du, R. Marzouk, Trace representation of pseudorandom binary sequences derived from Euler quotients, Appl. Algebra Eng. Commun. Comput., 26 (2015), 555–570. https://doi.org/10.1007/s00200-015-0265-4 doi: 10.1007/s00200-015-0265-4
![]() |
[9] |
Z. Chen, A. Gómez, D. Gómez-Pérez, A. Tirkel, Correlation measure, linear complexity and maximum order complexity for families of binary sequences, Finite Fields Th. Appl., 78 (2022), 101977. https://doi.org/10.1016/j.ffa.2021.101977 doi: 10.1016/j.ffa.2021.101977
![]() |
[10] |
Z. Chen, L. Hu, X. Du, Linear complexity of some binary sequences derived from Fermat quotients, China Commun., 9 (2012), 105–108. https://doi.org/10.1007/s11277-010-0104-7 doi: 10.1007/s11277-010-0104-7
![]() |
[11] | Z. Chen, A. Ostafe, A. Winterhof, Structure of pseudorandom numbers derived from Fermat quotients, In: Lecture notes in computer science, Berlin: Springer, 2010, 73–85. https://doi.org/10.1007/978-3-642-13797-6_6 |
[12] |
Z. Chen, A. Winterhof, Interpolation of Fermat quotients, SIAM J. Discrete Math., 28 (2014), 1–7. https://doi.org/10.1137/130907951 doi: 10.1137/130907951
![]() |
[13] |
X. Du, Z. Chen, L. Hu, Linear complexity of binary sequences derived from Euler quotients with prime-power modulus, Inform. Process. Lett., 112 (2012), 604–609. https://doi.org/10.1016/j.ipl.2012.04.011 doi: 10.1016/j.ipl.2012.04.011
![]() |
[14] |
D. Gómez-Pérez, A. Winterhof, Multiplicative character sums of Fermat quotients and pseudorandom sequences, Period. Math. Hung., 64 (2012), 161–168. https://doi.org/10.1007/s10998-012-3747-1 doi: 10.1007/s10998-012-3747-1
![]() |
[15] | H. Liu, X. Liu, On the correlation measures of orders 3 and 4 of binary sequence of period p2 derived from Fermat quotients, Adv. Math. Commun., in press. https://doi.org/10.3934/amc.2021008 |
[16] |
C. Mauduit, A. Sárközy, On finite pseudorandom binary sequencs I: measure of pseudorandomness, the Legendre symbol, Acta Arith., 82 (1997), 365–377. https://doi.org/10.4064/aa-82-4-365-377 doi: 10.4064/aa-82-4-365-377
![]() |
[17] |
A. Ostafe, I. Shparlinski, Pseudorandomness and dynamics of Fermat quotients, SIAM J. Discrete Math., 25 (2011), 50–71. https://doi.org/10.1137/100798466 doi: 10.1137/100798466
![]() |
[18] | C. D. Pan, C. B. Pan, Goldbach conjecture (Chinese), Beijing: Science Press, 2011. |
[19] |
I. Shparlinski, Fermat quotients: exponential sums, value set and primitive roots, Bull. Lond. Math. Soc., 43 (2011), 1228–1238. https://doi.org/10.1112/blms/bdr058 doi: 10.1112/blms/bdr058
![]() |
[20] |
I. Shparlinski, Character sums with Fermat quotients, Q. J. Math., 62 (2011), 1031–1043. https://doi.org/10.1093/qmath/haq028 doi: 10.1093/qmath/haq028
![]() |
[21] |
I. Shparlinski, Bounds of multiplicative character sums with Fermat quotients of primes, Bull. Aust. Math. Soc., 83 (2011), 456–462. https://doi.org/10.1017/S000497271000198X doi: 10.1017/S000497271000198X
![]() |
[22] |
J. Zhang, S. Gao, C. Zhao, Linear complexity of a family of binary pq2-periodic sequences from Euler quotients, IEEE Trans. Inf. Theory, 66 (2020), 5774–5780. https://doi.org/10.1109/TIT.2020.2979838 doi: 10.1109/TIT.2020.2979838
![]() |
[23] |
J. Zhang, C. Hu, X. Fan, C. Zhao, Trace representation of the binary pq2-periodic sequences derived from Euler quotients, Cryptogr. Commun., 13 (2021), 343–359. https://doi.org/10.1007/s12095-021-00475-1 doi: 10.1007/s12095-021-00475-1
![]() |