arXiv:2105.12012v2 [math.CO] 31 May 2021 f f Let d.Eeypolynomial Every odd. 00MSC: 2000 nti ae elmtorevst h td fpruaintrinomials permutation of study the to ourselves limit we paper this In trino d and more binomials much 7]. permutation problem 8, on a this focused for making authors ask polynomials, many Recently, can the by one However satisfied be essen field. to an finite ties provides a over interpolation polynomials Lagrange permutation assumptions example, particular For without structed. polynomials in permutation results general, For In area. the 11]. [6 to 4, to contributions [2, refer and we advances and recent codin [10], the in theory applications design wide combinatorial have and tography, fields finite over polynomials Permutation Keywords: for ax E AIISO EMTTO RNMASCONSTRUCTED TRINOMIALS PERMUTATION OF FAMILIES NEW : ∈ m c ,n m, f F F 7→ ( q q x 2 2 Abstract. ntest fsial partitions. suitable of sets the on rvd e lse fpruaintioil in trinomials lin permutation this of Along classes criterion. new (AGW) provide Akbary-Ghioca-Wang the Many on Cryptography. based and theory are Coding as such mathematics, plied tdigpruain ftesto ( of set the of permutations studying [ f q x etefiiefil with field finite the be 2 oiieitgrsc that such integer positive ( n scle emtto oyoilof polynomial permutation a called is ] − c 1 from ) + ) emtto oyoil,AWcntuto,Piiied-t Primitive construction, AGW Polynomials, Permutation rmr:1T6 eodr:12E10. Secondary: 11T06. Primary: b sthe is F emtto oyoil r fpriua infiac nsvrlare several in significance particular of are polynomials Permutation q 2 oisl sabijection. a is itself to index p ( YPRUAIN OF PERMUTATIONS BY x ICNOPLOZ LAVORANTE PALLOZZI VINCENZO over ) of q p 2 ( F x lmns with elements, 1. q ). n 2 | introduction a h form the has q q )t ot fuiy hc oklk monomials like look which unity, of roots 1)-th + 2 − 1 .Tesals integer smallest The 1. F F q q q 2 2 ax fisascae oyoilmapping polynomial associated its if = fteform the of m p f h ( x rm oe.Apolynomial A power. prime a µ q q 2 +1 n − 1 + ) f ( eetconstructions recent x 5 o oedtisof details more for 15] , te ra erfrto refer we areas other = ) ilmto oobtain to method tial b frsac,we research, of e whenever , il.Se[,1,13, 12, [3, See mials. roots h n x a eesl con- easily be can r uhthat such dtoa proper- dditional h over ( x ifficult. hoy cryp- theory, g so ap- of as q − 1 ,by ), F q f 2 with , 0 = (0) p ( x = ) b q , 2 V. PALLOZZI LAVORANTE

In [17] the authors provided an interesting way to obtain permutation trinomials of index q+1 over Fq2 by studying permutations of µq+1, the set of q+1-th roots of unity. They split µq+1 into two or three disjoint subsets and studied permutations on these sets separately, by using monomials. Following the same approach, we extend their method for a generic divisor d of q + 1 and study permutations on the sets µ q+1 , in order to get bijections on d µq+1. Under precise conditions, this gives new families of permutation trinomials over Fq2 of the type f(x)= xrh(xq−1). Indeed, we construct permutation polynomials of type − − xr(c + xn1(q 1) ± xn2(q 1)), where n1 and n2 are some properly chosen positive integers . The paper is organized as follows. In Section 2 we present some previous results that provides very useful methods for constructing permutations polynomial. In Subsection 3.1 we deal with the case d even and we prove the following Theorem. Theorem 1.1. Let d be an even integer. Assume that q ≡ −1 (mod d), q ≡ 1 (mod 4) q+1 c q+1 2 2 and gcd( d ,d)=1. Let c ∈ Fq be such that ( 2 ) = 1 and k be an odd integer. q+1 Furthermore, let v = d and v1 =(d − 1)v. Let h(x)= c + xv1+k + xqv+k, r q− q+1 1 2 then f(x)= x h(x ) is a permutation polynomial of Fq if and only if gcd(r−k, d )=1 q+1 , gcd(r, q − 1)=1 and gcd(s + r − k,d)=1, with s ≡ d (mod d) and s ≤ d.

Similarly, the case d odd is treated in Subsection 3.1. Theorem 1.2. Let d be an odd integer. Assume that q ≡ −1 (mod d), q ≡ 1 (mod 4) q+1 c q+1 2 2 and gcd d ,d =1. Let c ∈ Fq such that ( 2 ) =1 and k an odd integer. Furthermore let u = q+1 +1 and u =(d − 1) q+1 +1. Let d
1 d h(x)= c + xu1+k + xqu+2+k, r q−1 then f(x) = x h(x ) is a permutation polynomial of Fq2 if and only if gcd(r − k − q+1 q+1 1, d )=1, gcd(r, q − 1)=1 and gcd(s + r − k − 1,d)=1, with s ≡ d (mod d), s ≤ d.

At the end of Section 3, we give two new constructions which hold for every d. These last constructions are more general and are proven in the following Theorems.

∗ q+1 Theorem 1.3. Let q ≡ −1 (mod d), c ∈ Fq2 . Furthermore write v = d and v1 = (d − 1)v. Let h(x)= c + xv1+k − xqv+k, r q−1 2 then f(x)= x h(x ) is a permutation polynomial of Fq2 if and only if gcd(r, q −1)=1. NEW FAMILIES OF PERMUTATION TRINOMIALS CONSTRUCTED BY PERMUTATIONS OF µq+1 3

∗ q+1 2 Theorem 1.4. Let q ≡ −1 (mod d) and c ∈ Fq . Furthermore let u = d +1 and q+1 u1 =(d − 1) d +1. Let h(x)= c + xu1+k − xqu+2+k, r q−1 2 then f(x)= x h(x ), is a permutation polynomial of Fq2 if and only if gcd(r, q −1)=1.

Section 4 is dedicated to some special cases, occurring when d = 2 and d = 4. More precisely we obtain the following results.

c q+1 2 4 Theorem 1.5. Let q ≡ 3 (mod 8), and c ∈ Fq such that ( 2 ) = 1. Furthermore, let q+5 u = 4 and k be an even integer. Let h(x)= c + xu+k + xqu+k+2, r q−1 then the polynomial f(x) = x h(x ) is a permutation polynomial of Fq2 if and only if q2−1 q+1 gcd(r, 4 )=1 and gcd(r − k − 1, 4 )=1. c q+1 2 2 Theorem 1.6. Let q ≡ 1 (mod 2) and c ∈ Fq such that ( 2 ) =1. Let u q+1 v h(x)= c + x (x 2 − 1), con 2 ∤ u r q−1 then the polynomial f(x) = x h(x ) is a permutation polynomial of Fq2 if and only if q2−1 q+1 gcd(r, 2 )=1 and gcd(r − u, 2 )=1.

2. Previous results

This section contains the preliminary results about constructions of permutation polyno- mials we need. In [1], Akbary, Ghioca and Wang proved the following result, which is referred in [16] as the Akbary–Ghioca–Wang (AGW) criterion. Result 2.1 (The AGW criterion). Let A, S and S¯ be finite set such that |S| = |S¯|, and let f : A 7→ A, f¯: S 7→ S¯, λ: A 7→ S and λ¯ : A 7→ S¯ be mapping such that λ and λ¯ are onto and λ¯ ◦ f = f¯◦ λ. Then, the following statements are equivalent. (i) f is a permutation of A. (ii) f¯ is a bijection and f is one-to-one on λ−1(s) for all sinS.

The AGW criterion provides a powerful method to construct permutation polynomials, see [1, 14, 9]. In this paper we are using an important corollary to AGW, involving the set of q + 1-th roots of unity µq+1.

r q−1 Corollary 2.2. [6, Theorem 2.2.] Let h(x) ∈ Fq2 [x]. Then f(x) = x h(x ) is a permutation polynomial if and only if the followings are satisfied: 4 V. PALLOZZI LAVORANTE

(1) gcd(r, q − 1)=1; r q−1 (2) x h(x) permutes µq+1.

Thus, in order to get permutation polynomials of Fq2 we need to find permutations of µq+1. We focus our attention on the case where h(x) is trinomial.

In [17] the authors present a useful tool to investigate permutations of µq+1. Let d a positive integer such that d | q + 1, ξ be a primitive d-th root of unity, S0 = µ q+1 and d i Si = ξ S0 for i ≤ 1 ≤ d − 1. Result 2.3. [17, Theorem 1.2] Let d be a positive integer such that d | q +1 and let

Ai ∈ µq+1 for 0 ≤ i ≤ d − 1. For g(x) ∈ Fq2 [x], if

ri g(x)= Aix , for x ∈ Si, then g(x) is a permutation of µq+1 if and only if the following hold q+1 (1) gcd(ri, d )=1, for 0 ≤ i ≤ d − 1; ri rj (2) Aixi =6 Ajxj for xi ∈ Si and xj ∈ Sj.

Result 2.3 gives a new approach to construct permutations of µq+1 via monomials. In [17] it was used when d = 2 and d = 3, providing new classes of permutation polynomials.

In this paper, we extend this approach to the case d > 3. In fact, we split µq+1 into d disjoint subsets using a primitive d-th root of unity and we give conditions so that we can apply Result 2.3 to our case. See Theorem 3.2.

3. New permutation trinomials over Fq2

In this section we present the main results of this paper. From now on d is a positive integer such that d | q + 1. First, we need conditions which allows us to use Result 2.3. Let d be a positive integer q+1 such that gcd(d, d ) = 1 and consider a d-th primitive root of unity ω. We can split µq+1 d−1 i as µq+1 = ω µ q+1 , with the subsets mutually disjoint. Indeed, i=0 d i Remark 3.1.S The crucial point is to establish when the classes ω µ q+1 are all pairwise d disjoint. Thus, we note that the subgroup generated by ω has order d, while µ q+1 has order d q+1 d . This implies that q +1 hωi ∩ µ q+1 = {1} ⇐⇒ gcd ,d =1. d d   and we need to add this further condition. NEW FAMILIES OF PERMUTATION TRINOMIALS CONSTRUCTED BY PERMUTATIONS OF µq+1 5

After that, we use the following Theorem as the key to prove permutations on µq+1.

q+1 2 Theorem 3.2. Let d be a positive integer such that gcd(d, d )=1 and g(x) ∈ Fq [x] be a monomial such that ik n i i g(x)= Aω y , if x = ω y ∈ ω µ q+1 d with A ∈ µq+1. Then, g(x) is a permutation of µq+1 if and only if

q+1 (i) gcd( d , n)=1; (ii) gcd(k,d)=1.

q+1 Proof. Note that the first condition of Result 2.3 is satisfied since gcd(n, d )=1. On the other hand, choose i

(j−i)k q+1 ω d =16 ⇐⇒ d ∤ (j − i)k, which means gcd(k,d)= 1. In fact j − i runs over any positive integer less than d. 

3.1. Proof of Theorem 1.1. The proof is obtained using a preliminary Lemma. Let d be an even integer. Fix a primitive d-th root of unity, say ω.

q+1 Lemma 3.3. Let v = d and v1 =(d − 1)v. Then (3.1) xv1+k = xqv+k,

−v1 is i for every x ∈ µq+1. Furthermore x = ω , if x ∈ ω µ q+1 and s ≡d v. d

i Proof. Every x ∈ µq+1 can be written as x = ω y, with y ∈ µ q+1 . This implies that d (d−1) q+1 (d−1)is −is x d = ω = ω and xqv = ωqis = ω−is where we used that ωq+1 = ωd = 1.  6 V. PALLOZZI LAVORANTE

Proof of Theorem 1.1.

By Corollary 2.2, f(x) permutes Fq2 if and only if gcd(r, q − 1) = 1 and the polynomial g(x)= xrh(x)q−1 permutes µq+1. For every x ∈ µq+1 we have cq +2x−v1−k g(x)= xr(c +2xv1+k)q−1 = xr . c +2xv1+k

Note that v1 + k is an even integer, as k is odd and d even. Moreover q ≡ 1 (mod 4) q+1 q+1 2 c 2 v1+k implies that (−1) = −1. Thus, from 2 = 1, we obtain c =6 −2x for every x ∈ µ . q+1
Together with Lemma 3.3, this leads us to the following simplification: 2 2 2 g(x)= x−v1xr−k = ωis(ωiy)r−k = ωi(s+r−k)yr−k, c c c i i 2 if x ∈ ω µ q+1 and x = ω y, y ∈ µ q+1 . Note that ∈ µq+1. d d c

From Theorem 3.2, g(x) is a bijection of Fq2 if and only if gcd(r − k, v)=1 and gcd(s + r − k,d)=1. Combining that with gcd(q − 1,r) = 1 we complete the proof. 

3.2. Proof of Theorem 1.2. The proof is obtained using a preliminary Lemma. Let d be an odd integer. Fix a primitive d-th root of unity, say ω.

q+1 q+1 Lemma 3.4. Let u = d +1 and u1 =(d − 1) d +1. Then (3.2) xu1+k = xqu+k+2,

−u1 is −1 i q+1 for every x ∈ µq+1. Furthermore x = ω x , if x ∈ ω µ q+1 and s ≡d . d d Proof. contenuto... 

Proof of Theorem 1.2.

By Corollary 2.2, f(x) permutes Fq2 if and only if gcd(r, q − 1) = 1 and the polynomial defined by g(x)= xrh(x)q−1 NEW FAMILIES OF PERMUTATION TRINOMIALS CONSTRUCTED BY PERMUTATIONS OF µq+1 7 permutes µq+1. Using Lemma 3.4, for every x ∈ µq+1 we have: cq +2x−u1−k (3.3) g(x)= xr(c +2xu1+k)q−1 = xr . c +2xu1+k

+1 q q+1 c 2 u1+k 2 Since 2 =1 and (−x ) = −1, from the assumptions that q ≡4 1 and k,d odd, we cannot have c = −2xu1+k. This allows us to simplify as follows:

2 −u1 r−k 2 is r−k−1 i (3.4) g(x)= x x = ω x , for x ∈ ω µ q+1 , c c d

q+1 where d ≡d s. 2 i Note that ∈ µq+1 and let x = ω y, with y ∈ µ q+1 . This implies that c d

2 − − − − (3.5) g(x)= ωi(s+r k 1)yr k 1 c

Thus, according to Theorem 3.2, g(x) is a permutation of µq+1 if and only if q +1 gcd(r − k − 1, )=1 and gcd(s + r − k − 1,d)=1. d Combining these results with gcd(r, q − 1) = 1 we complete the proof. 

3.3. Proof of Theorems 1.3 and 1.4. In this subsection we use equation (3.1) and (3.2) in order to give other constructions of polynomials permuting Fq2 . Let d be any positive integer such that d | q + 1.

Proof of Theorem 1.3. We have that g(x)= xrh(x)q−1 is permuting µq+1 if and only if gcd(r, q − 1) = 1. Indeed, for every element x ∈ µq+1, g(x) can be simplified as − g(x)= cq 1xr. Thus, proof follows from Corollary 2.2. 

Similarly we obtain the proof of Theorem 1.4, which we omit. 8 V. PALLOZZI LAVORANTE

4. Other new constructions

We now provide other constructions of permutation polynomials for d = 4 and d = 2.

4.1. Proof of Theorem 1.5.

Assume that 4 | q + 1 and let ω be a 4-th primitive root of unity. Recall that µq+1 can be divided into four classes

q+1 • µ q+1 := {a ∈ Fq2 |a 4 =1} 4 q+1 • −µ q+1 := {a ∈ Fq2 |a 4 = −1} 4 ′ q+1 4 2 • µ q+1 := {a ∈ Fq2 |a = ω and ω = −1} 4 ′ q+1 4 2 • −µ q+1 := {a ∈ Fq2 |a = −ω and ω = −1} 4 q+5 q+1 Lemma 4.1. Let u = 4 = 4 +1. Then for x ∈ µq+1 we have u 2+qu 2−u • x = x = x , if x ∈ ±µ q+1 . 4 u 2+qu 2−u ′ • x = −x = −x , if x ∈ ±µ q+1 . 4

q 1  Proof. We use that ω = −ω and ω = −ω.

Proof of Theorem 1.5.

By Corollary 2.2, f(x) permutes Fq2 if and only if gcd(r, q − 1) = 1 and the polynomial r q−1 defined by g(x)= x h(x) permutes µq+1. In this case we have

r k u r cq+2x−ux−k • g(x)= x (c +2x x )= x u k if x ∈ ±µ q+1 . c+2x x 4 q−1 r ′ • g(x)= c x if x ∈ ±µ q+1 . 4

q+1 q+1 q+1 q c 4 u+k 4 4 +1 In the first case, since ( 2 ) =1 and (−x ) =(−1) with 4 an odd integer, we have c +2xu+k =6 0. Hence g(x) can be simplified as

2 r−k−1 x , x ∈ µ q+1 c 4 g(x)=  , 2 r−k−1 − x , x ∈ −µ q+1  c 4 q+1 which permutes ±µ q+1 if and only if gcd(r − k − 1, ) = 1. 4  4 2 2 r r ′ Similarly in the second case we can simplify g(x) as g(x) = ±( c ) ω x , for x ∈ ±µ q+1 . 4 ′ q+1 Then g(x) permutes ±µ q+1 if and only if gcd(r, 4 ) = 1. 4 NEW FAMILIES OF PERMUTATION TRINOMIALS CONSTRUCTED BY PERMUTATIONS OF µq+1 9

Combining these results we obtain that f(x) is a permutation polynomial of Fq2 if and q2−1 q+1  only if gcd(r, 4 ) = 1 and gcd(r − k − 1, 4 ) = 1.

4.2. Proof of Theorem 1.6. Assume now that 2 | q + 1.

Proof of Theorem 1.6. In this case the polynomial g(x)= xrh(x)q−1 is defined by q−1 r c x , x ∈ µ q+1 2 (4.1) g(x)= r u q−1 x (c − 2x ) , x ∈ −µ q+1 ( 2 c q+1 q+1 Since ( ) 2 = 1, g(x) permutes µ q+1 if and only if gcd(r, ) = 1. 2 2 2 Furthermore for every x ∈ −µ q+1 we have 2 c − 2xu =06 ⇐⇒ 2 ∤ u r−u 2 r−u This implies that we can simplify g(x) as g(x)=(−1) x , which permutes −µ q+1 if c 2 q+1 and only if r is odd and gcd(r − u, 2 ) = 1. Combining these results, we obtained that f(x) is a permutation polynomials of Fq2 if q+1 q2−1  and only if gcd(r − u, 2 ) = 1 and gcd(r, 2 ) = 1.

r Note that for v an even integer we have the standard case f(x)= cx for c ∈ Fq2 .

q+1 c 2 Corollary 4.2. Let q ≡ 3 (mod 4) and ( 2 ) =1. The polynomial f(x)= xrh(xq−1), where

u q+1 v h(x)= c + x (x 2 − 1), con 2 ∤ u, v is not a permutation polynomial of Fq2 .

Acknowledgements

The research of V. Pallozzi L. was partially supported by the Italian National Group for Algebraic and Geometric Structures and their Applications (GNSAGA - INdAM).

References

[1] Akbary A. , Ghioca D, Wang Q, On constructing permutations of finite fields, Finite Fields Appl. 17 (2011) 51–67. 10 V. PALLOZZI LAVORANTE

[2] Bartoli D., Giulietti M.: Permutation polynomials, fractional polynomials, and algebraic curves. Finite Fields Appl. 51, 1-16 (2018) [3] Ding C., Qu L., Wang Q., Yuan J., Yuan P.: Permutation trinomials over finite fields with even characteristic. SIAM J. Discrete Math. 29, 79–92 (2015) [4] Ding C., Yuan J.: A family of skew Hadamard difference sets. J. Combin. Theory Ser. A. 113, 1526–1535 (2006) [5] Hermite C.: Sur les fonctions de sept lettres. C. R. Acad. Sci. Paris, 57, 750–757 (1863) [6] Hou X, Permutation polynomials over finite fields — A survey of recent advances , Fi- nite Fields and Their Applications, Volume 32, 2015, Pages 82-119, ISSN 1071-5797, https://doi.org/10.1016/j.ffa.2014.10.001. [7] Hou X.: Determination of a type of permutation trinomials over finite fields II. FiniteFieldsAppl. 35, 16–35 (2015) [8] Hou X.: A survey of permutation binomials and trinomials over finite fields. Contemporary Mathe- matics. 632, 177-191(2015) [9] Kyureghyan G., Zieve M.: Permutation polynomials of the form x + γT r(x). In: Contemporary Developments in Finite Fields and Applications, World Scientific, 178–194 (2016) [10] Laigle-Chapuy Y.: Permutation polynomials and applications to coding theory. Finite Fields Appl. 13, 58–70 (2007) [11] Lidl R., Niederreiter H.: Finite fields. 2nd ed., Encyclopedia of Mathematics and its Applications, vol. 20, Cambridge University Press, Cambridge (1997) [12] Li K., Qu L., Chen X.: New classes of permutation binomials and permutation trinomials over finite fields. Finite Fields Appl. 43, 69-85 (2017)

[13] Li K., Qu L., Chen X., Li C.: Permutation polynomials of the form cx+T rql/q(xa) and permutation trinomials over finite fields with even characteristic. Cryptogr. Commun.10, 531–554 (2018) [14] Li K., Qu L., Wang Q.: New constructions of permutation polynomials of the form xrh(xq−1) over Fq2. Des. Codes Crypto. https://doi.org/10.1007/s10623-017-0452- 3 (2018) [15] Li N., Zeng X.: A survey on the applications of Niho exponents. Cryptogr. Commun. 11, 509-548 (2019) [16] Mullen G. L., Panario D. (Eds), Handbook of Finite Fields, CRC Press, Boca Raton, 2013. [17] X. Quin , L. Yan. Constructing permutation trinomials via monomials on the subsets of µq+1 AAECC (2021). https://doi.org/10.1007/s00200-021-00505-8

Dipartimento di Matematica Pura e Applicata, Universita´ degli Studi di Modena e Reggio Emilia Email address: [email protected]