Block Ciphers · Cryptography and Network Security

Fields

1. What a Field Is (Ring + Inverses)

A field (F,+,×)(F, +, \times) is a commutative ring with unity where every nonzero element has a multiplicative inverse:

  • (F,+)(F, +) abelian group; (F∖{0},×)(F \setminus \{0\}, \times) abelian group.
  • So: a+(−a)=0a + (-a) = 0, a×a−1=1a \times a^{-1} = 1 ($a
    e 0$); no zero divisors; cancellation always works; division (by nonzero) defined.
  • Finite field = Galois field GF(q)GF(q), exists ⟺ q=pnq = p^n (prime power). Crypto uses GF(p)GF(p) (Diffie–Hellman, DSA, elliptic curves mod pp) and GF(2n)GF(2^n) (AES GF(28)GF(2^8)). Characteristic: 1+1+⋯=01 + 1 + \cdots = 0 after pp additions (p=2p = 2 for binary fields: a+a=0a + a = 0, i.e. XOR).

2. Worked Examples

Field Elements Inverse example Used in
(Q,+,×)(\mathbb{Q}, +, \times) rationals (3/2)−1=2/3(3/2)^{-1} = 2/3 Theory (infinite)
(Z7,+,×)(\mathbb{Z}_7, +, \times) = GF(7)GF(7) {0..6}\{0..6\} 2−1=42^{-1} = 4 (2×4=8≡12 \times 4 = 8 \equiv 1); 3−1=53^{-1} = 5 Toy DH/ElGamal sums
GF(2)={0,1}GF(2) = \{0, 1\} bits 1−1=11^{-1} = 1 All binary arithmetic
GF(28)GF(2^8) (AES) bytes as polynomials x−1 mod m(x)x^{-1} \bmod m(x) via Euclid (Module 3) AES SubBytes/MixColumns

Non-example: Z6\mathbb{Z}_6 not a field (2, 3, 4 lack inverses); Z8\mathbb{Z}_8 not a field (evens fail). Zn\mathbb{Z}_n is a field ⟺ nn prime (proof: prime n⇒gcd⁡(a,n)=1⇒n \Rightarrow \gcd(a,n) = 1 \Rightarrow Euclid gives inverse — Module 3 Topic 1).

3. Field Properties Exams Love

  • GF(p)∗GF(p)^* is cyclic of order p−1p-1: primitive element gg generates all nonzero (e.g. 33 generates Z7∗\mathbb{Z}_7^*: 3,2,6,4,5,13,2,6,4,5,1). Discrete-log hardness lives here.
  • Freshman's dream in characteristic pp: (a+b)p=ap+bp(a+b)^p = a^p + b^p (binomial coefficients (pk)\binom{p}{k} vanish mod pp) — basis of Fermat/Euler proofs and AES square-and-multiply checks.
  • Polynomial roots: degree-nn polynomial has ≤n\le n roots in a field (fails in rings: x2−1x^2 - 1 has 4 roots mod 8) — why Shamir secret sharing / Reed–Solomon need fields.
  • Subfields: GF(pm)⊂GF(pn)GF(p^m) \subset GF(p^n) ⟺ m∣nm \mid n (AES GF(28)GF(2^8) contains GF(24)GF(2^4), GF(22)GF(2^2), GF(2)GF(2) — used in composite-field S-box hardware).

4. Bridge to Modules 3–5

  • Module 3 Topics 1–4: Euclid → inverses in GF(p)GF(p); polynomial Euclid → inverses in GF(28)GF(2^8).
  • Module 4 Topic 2: every AES SubBytes/MixColumns step is GF(28)GF(2^8) arithmetic.
  • Module 5: Fermat (ap−1=1a^{p-1} = 1 in GF(p)∗GF(p)^*) → Euler (aϕ(n)=1a^{\phi(n)} = 1 in Zn∗\mathbb{Z}_n^*) → RSA (med=mm^{ed} = m via group orders).

Exam Points

  • Field axioms + "Zn\mathbb{Z}_n field ⟺ nn prime" with Euclid justification — 5-mark core.
  • Inverse numericals (2−1=42^{-1} = 4, 3−1=53^{-1} = 5 mod 7) + generator trace.
  • Cyclic GF(p)∗GF(p)^* + primitive element definition.
  • Non-examples Z6\mathbb{Z}_6, Z8\mathbb{Z}_8 with failing elements named.
AI LearningWeb Platform

Coursify — Personal AI Course Generator

Struggling with a difficult subject or concept? Turn any engineering topic into a structured course with interactive lessons, quizzes, and research-backed explanations.

← All Cryptography and Network Security modules