Pseudo-Hadamard transform

The pseudo-Hadamard transform is a reversible transformation of a bit string that provides cryptographic diffusion. See Hadamard transform.

The bit string must be of even length, so it can be split into two bit strings "a" and "b" of equal lengths, each of "n" bits. To compute the transform, "a"' and "b"', from these we use the equations:

:$a\text{'}\; =\; a\; +\; b\; ,\; pmod\{2^n\},$

:$b\text{'}\; =\; a\; +\; 2b,\; pmod\{2^n\},$

To reverse this, clearly:

:$b\; =\; b\text{'}\; -\; a\text{'}\; ,\; pmod\{2^n\}$

:$a\; =\; 2a\text{'}\; -\; b\text{'}\; ,\; pmod\{2^n\}$

Generalisation

The above equations can be expressed in matrix algebra, by considering "a" and "b" as two elements of a vector, and the transform itself as multiplication by a matrix of the form:

:

The inverse can then be derived by inverting the matrix.

However, the matrix can be generalised to higher dimensions, allowing vectors of any power-of-two size to be transformed, using the following recursive rule:

:

For example:

:

ee also

* SAFER
* Twofish

References

* James Massey, "On the Optimality of SAFER+ Diffusion", 2nd AES Conference, 1999. [http://csrc.nist.gov/CryptoToolkit/aes/round1/conf2/papers/massey.pdf]
* Bruce Schneier, John Kelsey, Doug Whiting, David Wagner, Chris Hall, "Twofish: A 128-Bit Block Cipher", 1998. [http://www.schneier.com/paper-twofish-paper.html]
* Helger Lipmaa. On Differential Properties of Pseudo-Hadamard Transform and Related Mappings. INDOCRYPT 2002, LNCS 2551, pp 48-61, 2002.

External links

* [http://eprint.iacr.org/2004/010.pdf Fast Pseudo-Hadamard Transforms]