Paper 2026/1672
AFS: A Family of ARX-Based Large-State S-boxes with Exceptional Properties
, Guangxi Key Laboratory of Cryptography and Information Security, Guilin University of Electronic Technology, Guangxi Key Laboratory of Cryptography and Information Security, Guilin University of Electronic Technology, State Key Laboratory of Cryptology, University of Primorska, University of PrimorskaAbstract
Large-state ARX-based S-boxes have become a key component of modern lightweight cryptographic designs, yet deriving tight security bounds for their differential and linear properties remains challenging. In this paper, we study the security of Alzette, the 64-bit ARX-based S-box used in the SPARKLE permutation, and present a general framework for the analysis and design of large-state ARX S-boxes. We introduce SMCS, a hybrid search strategy that combines MILP-based optimization with SMT-based model checking, enabling the computation of tight bounds on maximum expected differential probabilities and linear correlations. Using SMCS, we refine existing bounds for Alzette and, for the first time, establish tight linear bounds (resp. differential bounds) for up to 15 rounds (resp. 14 rounds). Building on these results, we propose S-box configurational encoding, an automated design method for ARX-based S-boxes, and introduce a new family of S-boxes called AFS (ARX-Feistel Structure) with 32-bit and 64-bit instances. We show that selected AFS instances achieve strictly better resistance to single-trail differential and linear cryptanalysis than SPECKEY and Alzette, respectively, while preserving comparable hardware and software costs. Finally, we present the first bit-based SMT model for optimal long-trail decomposition and apply it to derive more accurate bounds for SPARX-128 and SPARKLE. Our results show that replacing the S-boxes with AFS instances yields substantial improvements in cryptanalytic security margins.
Note: The main ideas presented in this work date back to December 2023, when an earlier version of the manuscript was submitted to a conference.
Metadata
- Available format(s)
-
PDF
- Category
- Secret-key cryptography
- Publication info
- Preprint.
- Keywords
- Automatic searchdifferential cryptanalysislinear cryptanalysisARX S-boxAlzetteAFSconfigurational encoding
- Contact author(s)
-
zhiguang_yan @ 163 com
walker_wyz @ guet edu cn
rene7ca @ gmail com
enes pasalic6 @ gmail com - History
- 2026-08-18: revised
- 2026-08-13: received
- See all versions
- Short URL
- https://ia.cr/2026/1672
- License
-
CC BY-NC-ND
BibTeX
@misc{cryptoeprint:2026/1672,
author = {Zhiguang Yan and Yongzhuang Wei and René Rodríguez-Aldama and Enes Pasalic},
title = {{AFS}: A Family of {ARX}-Based Large-State S-boxes with Exceptional Properties},
howpublished = {Cryptology {ePrint} Archive, Paper 2026/1672},
year = {2026},
url = {https://eprint.iacr.org/2026/1672}
}
