Concrete Mathematics 6.1 Stirling Number Identities

关注

原创最新推荐文章于 2026-11-09 18:00:00 发布 760 阅读 AI 写同款· GEO 优化 ›

5个4000比特大状态置换算法的设计与分析下面是 5 个概念性、实验性的 4000 位可逆置换设计。它们都保证是双射，但未经过密码分析，不可直接用于生产系统。风格分别覆盖：三维 SPN、Feistel、可逆元胞自动机、ARX、宽轨迹/Keccak 式结构。这 5 个设计分别代表了 SPN、Feistel、元胞自动机、ARX、宽轨迹 Keccak 五种不同风格，覆盖了主流大状态置换的构造思路。再次强调：它们只是实验性概念，若要用于实际协议，必须经过严格安全性分析。阅读详情

${n+1m+1}=∑k(nk){km}(6.15)\begin{Bmatrix}n+1 \\m+1\end{Bmatrix}=\sum_k \binom{n}{k}\begin{Bmatrix}k \\m\end{Bmatrix} \tag{6.15}$

We enumerate the size of the subset which $n + 1$ belongs to, which equals $n - k + 1$ . We first choose $n - k$ elements that is in the same subset with $n + 1$ , which is $(nk)\dbinom{n}{k}$ , then allocate the rest $k$ elements into $m$ non-empty subsets.

$[n+1m+1]=∑k[nk](km)(6.16)\begin{bmatrix}n+1 \\m+1\end{bmatrix}=\sum_k \begin{bmatrix}n \\k\end{bmatrix}\binom{k}{m} \tag{6.16}$

This looks almost the same as the previous one, but it’s much harder to consider the combinatorial explanation.
What the formula do is obvious. First divide the first $n$ elements into $k$ cycles, then choose $m$ cycles from it, and combine the rest $k - m$ cycles with $n + 1$ to form a new cycle. But the question is how to proof this approach is not heavy and not leaky.
Consider that we first divide the elements into $m + 1$ subsets $,Am+1A_1,A_2,\cdots,A_{m+1}$ . We assume that $n+1∈A1n+1\in A_1$ . Say $C(A_i)$ is a cycle formed with elements in $A_i$ . Take any specific $,C(Am+1)C(A_2),C(A_3),\cdots,C(A_{m+1})$ ,there are $A_1|-1)!$ ways to choose $C(A_1)$ . In our formula, with $,C(Am+1)C(A_2),C(A_3),\cdots,C(A_{m+1})$ fixed(after we times $k$ choose $m$ ), the subset $A_1$ is constitute of some of the cycles of its elements, which sum up to exactly $∑k[∣A1∣−1k]\sum_k\begin{bmatrix}|A_1|-1 \\k\end{bmatrix}$ times, which equals $A_1|-1)!$ .