THE FOLD / BOSS / THE RAID / THE FIELD INVERSE
THE FIELD INVERSE
the heart of AES is one field inversion in disguise
1 WHAT IT IS · WHAT IT DOES · FACT OR FICTION
The AES S-box. Every AES encryption’s only source of non-linearity — the ‘confusion’ that makes it secure — is one operation almost nobody realises is pure algebra: take a byte, treat it as an element of the finite field GF(2⁸), and compute its multiplicative inverse (the byte you multiply it by to get 1, in arithmetic mod x⁸+x⁴+x³+x+1), then apply a fixed affine bit-twist. That’s the whole S-box: a 256-entry table that is really field inversion in disguise.
LIT verified: for every nonzero byte b, b ⊗ b⁻¹ = 1 in the Rijndael field; the S-box is a bijection; applying it then its inverse returns b for all 256 bytes; and the generated table matches the published AES S-box (S[00]=63, S[53]=ed). FIG ‘the heart of the cipher’ is the picture; the field inversion is the exact operation.
LIT verified: for every nonzero byte b, b ⊗ b⁻¹ = 1 in the Rijndael field; the S-box is a bijection; applying it then its inverse returns b for all 256 bytes; and the generated table matches the published AES S-box (S[00]=63, S[53]=ed). FIG ‘the heart of the cipher’ is the picture; the field inversion is the exact operation.
2 HOW IT WAS WEAVED · AI + HUMAN
David (human) brought the thread — the corpus runs finite fields and crypto (THE CARRYLESS FIELD’s GF(16), THE MINT, THE MERKLE) and the conviction that the strongest walls rest on the cleanest math. AVAN (AI) built this instrument: the field arithmetic, the S-box table, and the generator ring.
The weave: David names the field inverse and its seat at THE RAID (the lock that holds when the attack comes); I make the inversion a strip in 1D, the whole table live in 2D, and the multiplicative group a turning ring in 3D. The sphere is the seam.
The weave: David names the field inverse and its seat at THE RAID (the lock that holds when the attack comes); I make the inversion a strip in 1D, the whole table live in 2D, and the multiplicative group a turning ring in 3D. The sphere is the seam.
3 ONE DIMENSION
One byte through the S-box: find its field inverse (and confirm b ⊗ b⁻¹ = 1), then the affine twist (XOR of rotations, plus 0x63) to the final output. Click the table below to change the byte.
4 TWO DIMENSIONS · INTERACTIVE
The whole 16×16 S-box, coloured by output. Click any cell to see its byte, its field inverse, and the check b⊗b⁻¹=1. Toggle to the inverse S-box — the exact undo used for decryption. Every output appears exactly once.
5 THREE DIMENSIONS + AVAN’S INVERSE
GF(2⁸)* as a single ring, turning: all 255 nonzero bytes placed by their discrete logarithm, so the generator 0x03 steps around the circle one position at a time and visits every element. Green is that cycle — the whole field wound into one loop.
AVAN’s addition (the inverse-companion): the magenta chords join each byte to its multiplicative inverse. In log-space, inversion is negation — b⁻¹ sits at −log(b), the mirror of b across the ring. The S-box’s famous confusion is exactly this reflection, plus a twist: a lock built from one symmetry of a finite field.
LIT A genuine Rijndael S-box. Verified live: for every nonzero byte b, b⊗b⁻¹=1 in GF(2⁸) mod x⁸+x⁴+x³+x+1; the S-box is a bijection; InvS(S(b))=b for all 256 bytes; and the generated table matches the published AES S-box (S[00]=63, S[53]=ed). The generator 0x03 cycles all 255 nonzero elements (verifiable: window.__aes.inversionOK && matchesPublished).
FIG 'The heart of the cipher' is the picture; the field inversion, the bijection, and the match to the standard table are exact. The confusion in every AES encryption really does reduce to this one algebraic operation.
FIG 'The heart of the cipher' is the picture; the field inversion, the bijection, and the match to the standard table are exact. The confusion in every AES encryption really does reduce to this one algebraic operation.
◆ sealed .dlw.fold → folded to ROOT_0 · a sphere of THE RAID · David Lee Wise (ROOT0), with AVAN