1. Introduction and Preliminaries
A
Latin square of order
n is an
n×
n array comprising of
n distinct elements, such that each element occurs exactly once in each row and column [
1,
2]. A
partial Latin square is an
n×
n array with all entries of the array belonging to the set {0, 1,
…,
}. There can be blank entries within a
partial Latin square, but each element of the set {0, 1,
…,
} must only occur once in each row and column [
3]. Partial Latin squares can be considered substructures of
Latin squares, as such; a partial Latin square can be
completed to form a Latin square by replacing the blank entries of the partial Latin square with elements of the set {0, 1,
…,
} in such a way that each element in the set only occurs once in each row and column [
3]. A
partial Latin square is said to be
uniquely completable if it only has one possible
completion [
3]. We consider two mechanisms by which a partial Latin square
P can be (uniquely) completed to a Latin square
L. A triple
denotes an entry within a partial Latin square such that
i is the row component,
j is the column component and
k denotes the symbol in the cell
. A triple
in a partial Latin square
P is
forced if the cell
is the only empty cell in either the
ith row or
jth column and the symbol
k is the only symbol not appearing in the respective row or column. Similarly a triple is forced if the symbol
k appears in every row and column of
L except the
ith row and
jth column [
4].
The second mechanism considered is applying autotopisms to the set of triples of a partial Latin square
P to generate a Latin square
L, on occasion this may additionally require the application of forced moves. Before defining an autotopism, it is important to define the notion of a quasigroup; a set
S is a
quasigroup if there exists a binary operator * such that ∀
a,
b∈
S =
b and
=
b have exactly one solution. The multiplication table of a quasigroup forms a Latin square [
1,
2]. An autotopism is formally defined [
1,
2,
5];
Definition 1. Let and be two quasigroups. An isotopism is an ordered triple of row, column and symbol permutations, θ = that maps onto , providing that ∈B, denote a pair of row and column coordinates ∗ = ·j). An autotopism is an isotopism that maps a quasigroup onto itself.
Let Atop(
L) denote the set of all autotopisms associated with a Latin square
L. Atop(
L) constitutes a group under the composition of permutations; this is know as the autotopism group of
L [
4]. As stated in [
4], each autotopism
Atop(
L) generates a subgroup of Atop
, denoted
. This may be extended to the set generated by
Atop(
L), which will also form a subgroup of Atop(
L), denoted
.
As in [
4], let Ent(
P) denote the set of non-empty cells of a partial Latin square
P. Further, Reference [
4] defines the
-orbit of a triple
, for some autotopism
Atop(
L), as the set
This idea can be extended to
-orbits [
4]. For a collection of autotopisms
Atop(
L), the
-orbit of a triple
is the set
We are interested in using
-orbits to determine
-critical sets. A critical set is formally defined [
5]:
Definition 2. A critical set C in a Latin square, L, is a setwhere: L is the only Latin square of order n which has the symbol k in the cell for each ∈C.
No proper subset of C has property 1.
Furthermore, we define a partial Latin square
P to be
-completable to a Latin square
L, with
, if there exists a partial Latin square
Q that is completable to
L such that;
We can say that
P is uniquely
-completable if
L is unique, and moreover,
P is an
-critical set of the Latin square
L if no proper subset of Ent(
P) is
-completable to
L [
4].
The paper by Falcón [
6], on which this communication is based, looks at building a secret sharing scheme using
-critical sets.
A
secret sharing scheme is a cryptographical scheme in which
k participants are each given a part of a secret key
K, called a share [
7]. In secret sharing schemes, certain shares may be combined to generate the original secret key
K. These are referred to as authorised groups. All unauthorised groups will be unable to recover the secret key
K[
6]. The
access structure defines the set of authorised groups of shares [
6]. Throughout this communication, the term
access level will be used to refer to each minimal authorised group.
A previous secret sharing scheme based on critical sets in Latin squares was proposed by Cooper et al [
8]. In this secret sharing scheme, a particular Latin square
K of order
n is chosen as the secret key. The
k shares distributed to participants in this scheme are triples of Ent(
K). The access structure for this scheme is the set
.
The scheme proposed by Falcón, seeks to extend the scheme proposed by Cooper et al. to
-critical sets of Latin squares. The secret key for the scheme proposed in [
6] is also a Latin square
K. However, in this scheme there are two types of shares that may be distributed to the
k participants of the scheme; a group of the shares will be autotopisms
, such that
Atop(
K) and the remaining shares will be triples
Ent(
K). Formally, the access structure for the scheme is then the set
.
Below, an overview of the scheme proposed in [
6] is given:
Overview of the secret sharing scheme:
A Latin Square K of order n is selected as the key for the scheme. The order n of the Latin Square K is made public, whilst K is kept private.
A set of T triples, where Ent(T) ⊂ Ent(K) is selected, along with a collection of autotopisms associated with K.
The triples of Ent(T) and autotopisms in associated with K are distributed to the k participants in the secret sharing scheme in such a way that when a group of t participants come together, the union of whose shares form an -critical set of K. They are thus able to combine their shares in order to find the key K.
In [
6], Falcón provides an example to accompany the scheme, which demonstrates how the secret sharing scheme may be applied to a particular Latin square of order 6. The example is detailed below.
Example 1. The Latin square K is chosen as the key for the secret sharing scheme, where; The
k participants in the scheme will be assigned autotopisms belonging to
and triples belonging to a partial Latin square
T, where Ent(
T) ⊂ Ent(
K). In this example, the set
consists of the four autotopisms
={
,
,
,
} associated with the Latin square
K. These are defined;
There are 11 triples in the partial Latin square
T. Each triple in the set
T={
,...,
} is defined;
The autotopisms and
T triples are assigned to participants within the scheme in accordance with
Table 1, where
Table 1 provides examples of access levels for the autotopisms and
T triples given in Example 1. Note that
m in
Table 1 denotes the number of shares within each access level. There has also been a change in notation from the original example in [
6]; the notation
has been used in
Table 1 in place of the notation {…}. This is to highlight more clearly that the autotopisms in each access level will generate a subgroup of Atop(
K).
To give an example of how these access levels work; take the set of shares
and
.
Table 1, shown above, states that the union of
-orbits for each triple in the set
, should form an
-critical set, when
is the subgroup of autotopisms generated by
. The autotopisms within this subgroup are;
This subgroup of Atop(
K) will generate the following
-orbits for the shares
;
Let
=Ent(
) be a partial Latin square, where;
Observe that the partial Latin square is uniquely completable, hence applying the subgroup of Atop(K) generated by to the set of triples will give a uniquely -completable set. Notice that the removal of any -orbit of Ent() will generate a partial Latin square =Ent() that is not uniquely completable to K. This demonstrates that -orbits of under the autotopism form an -critical set. As the set is a minimal collection of shares that combine to generate the secret key K, it is an access level for the scheme.
2. Interesting Observations about Uniquely Completable Partial Latin Squares and the Applications of These Observations to the Example
The Applications of These Observations to the Example in [
6], In this section, we will consider further substructures of Latin squares and demonstrate how the existence of these substructures within a Latin square
L informs how the
-critical sets of
L may be constructed.
Definition 3. [9] A Latin subsquare of a Latin square is an submatrix of (not necessarily adjacent) entries that is itself a Latin square. Note that a Latin subsquare has order at least 2. Definition 4. [9] An intercalate of order 2 is a Latin subsquare of order 2. Example 2. Observe that the four quadrants of the Latin square K given in the example in [6] form four Latin subsquares of order 3, which will form a set , where for . There are also nine intercalates of the form for within K. The set of intercalates will be denoted .
Lemma 1. All Latin squares of order 2 contain critical sets.
Proof. Let L be a Latin square of order . Removing the triple from L will generate a partial Latin square P in which the cell is empty, but all other cells within P are non-empty. Hence, P is a uniquely completable to the Latin square L and .
The empty partial Latin square of order is not uniquely completable to any Latin square of order n.
Therefore, every Latin square L of order n contains a non-empty partial Latin square P that is uniquely completable to L and a partial Latin square that is not uniquely completable to L. Therefore, there exists a minimal partial Latin square that is uniquely completable to L, such that every subset of is not uniquely completable to L. Hence, every Latin square of order contains a critical set. □
Corollary 1. For each Latin subsquare Q of order there exists a partial Latin square A such that A is not uniquely completable to Q.
Proof. A Latin subsquare Q is a Latin square of order m within a Latin square of order n. By Lemma 1, as Q has order , it has a critical set and hence there will be some partial Latin square A such that A is not uniquely completable to Q. □
Lemma 2. Let Q be a Latin subsquare of order contained within a Latin square L and let A be a partial Latin square that is not uniquely completable to the Latin subsquare Q. If a partial Latin square P contains A and no other elements of Ent(Q), then P will not be uniquely completable to L.
Proof. By Corollary 1, every Latin subsquare Q of order m, where 2, contains a partial Latin square A, where A is not uniquely completable to Q. Note, when Q is an intercalate, A is the empty partial Latin square. Let P denote a partial Latin square, such that . If a partial Latin square P contains A and no other triples in Ent(Q), then the partial Latin square P will not force the entries of the Latin subsquare Q. As and the triples of Q are not forced from the triples of P, then P is not uniquely completable to L. □
Although Lemma 2 does not imply that a partial Latin square P will always be uniquely completable to a Latin square L if it contains a critical set of each Latin subsquare , it does imply that if this condition is not met, then P will not be uniquely completable to L.
To relate this to
-critical sets in the example in [
6]; if the
-orbits for some partial Latin square
P do not intersect with the critical sets of each Latin subsquare within
, then the partial Latin square
P will not be an
-critical set of
K. Example 3 details the more specific implications of Lemma 2 to the example in [
6].
Example 3. In [4], it was demonstrated that the critical sets of Latin squares of order 3 either consist of two triples and , where , and , or a critical set of a Latin square of order 3 consists of a set of three triples such that each pair of triples in this set share exactly one common ith, jth or kth component. The key observation here is that critical sets of Latin squares of order 3 must contain entries in at least two distinct rows, two distinct columns and the critical sets contain two sets of distinct symbols. By Lemma 2, a partial Latin square P is not uniquely completable to the Latin square K if it does not contain a critical set of each Latin subsquare in K. This implies that if a partial Latin square P does not contain an entry in at least two distinct rows and columns of each order 3 Latin subsquare , or if each of the Latin subsquare in P does not contain at least two distinct symbols, then P will not be uniquely completable to K. Furthermore, the Latin square K contains nine intercalates, each denoted by for . Since order 2 Latin squares have a critical set of size 1, if a partial Latin square does not contain at least one entry in each intercalate , then P will not be uniquely completable to K.
4. Discussion of Example
Ref [
6]. Not all autotopisms listed in example [
6] are members of the autotopism group Atop(
K). Further to this, there are some minor errors in the access levels listed in
Table 1 in
Section 1. Lemma 2 and the observations about the autotopisms discussed in
Section 3, make it possible to modify to the example. Each amendment will be discussed in detail within this section.
4.1. Discussion Regarding the Autotopisms and
Discussion Regarding the Autotopisms
and
in [
6]. The first two modifications are changes to some of the autotopisms associated with the Latin square
K in [
6]. Two of the autotopisms,
and
, are not associated with the Latin square
K. By definition, applying an autotopism to a Latin square that it is associated with should generate another element of that Latin square. However, applying the autotopisms
and
to any of the 11 chosen shares from the set {
,...,
} does not generate another element of
K. To demonstrate this,
and
are applied to the share
;
Observe, applying
and
to
does not generate elements of the original Latin square,
L. Hence, these autotopisms are not associated with Atop(
K). It is believed that the intended autotopisms for
and
should be;
From this point in the communication, when
and
are referred to, they refer to the autotopisms
and
given above and not the autotopisms given in [
6].
All subsequent suggested amendments focus on the access levels.
4.2. Discussion Regarding the Access Level for the Autotopisms in the Subgroup
Discussion Regarding the Access Level for the Autotopisms in the Subgroup
in [
6]. The access level generated by the autotopism subgroup
was mis-recorded in [
6]. According to the example in [
6], combining the subgroup of Atop(
K),
, with all triples in the set
should generate a uniquely completable partial Latin square. However, combining
with the stated triples generates the following
-orbits;
The union of these
-orbits gives the partial Latin square
, where;
This partial Latin square
is not uniquely completable as it only uniquely completes to the partial Latin square
, where;
Since there are no entries in the intercalate , by Lemma 2, is not uniquely completable to L. In order for the partial Latin square to be uniquely completable to L, the share needs to be included within this access level so that there is an entry in the intercalate .
It is also worth noting that -critical sets are supposed to be minimal. As and are both members of the intercalate and similarly and both belong to the intercalate , this set is not minimal. By removing one element of each set and , the access level becomes an -critical set comprising of nine triples from the set T and the autotopism ; giving ten individual shares in total. An example of a viable -critical set is to take the -orbits of the triples , where is the subgroup of Atop(K) generated by the autotopism .
4.3. Discussion Regarding the Access Level for the Autotopisms in the Subgroup
Discussion Regarding the Access Level for the Autotopisms in the Subgroup
in [
6]. Access levels can also be generated by
-orbits, where
is a subgroup of the Atop(
K) generated by more than one autotopism. The first access level to be generated by a set of multiple autotopisms, is the access level generated by the
-orbits of the subgroup of autotopisms
. This subgroup consists of the following non-trivial autotopisms;
The example in [
6] (see
Table 1 in
Section 1) suggests that applying this subgroup of Atop(
K) to the set of triples {
,
,
,
,
,
,
,
} will generate an
-critical set. However, when
is the subgroup of Atop(
K) generated by
, the
-orbits of the set of triples {
,
,
,
,
,
,
,
} forms a partial Latin square that is not uniquely completable, as the
-orbits do not contain an entry in the intercalate
. As above, if the triple
is included within the set of triples for this access level, then the resultant partial Latin square is uniquely completable to the Latin square
K. However, adding
to this set means that this access level consists of nine triples from the set
T and both autotopisms
and
. This gives a total of eleven shares. As previously shown, the
-orbits of the triples {
,
,
,
,
,
,
,
,
} under the subgroup of Atop(
K),
, form an
-critical set of size 10. Hence, the autotopisms
will generate a uniquely
-completable set that is not minimal, and therefore not an
-critical set. Therefore, the autotopisms
and
cannot be used in combination to generate an access level for this scheme.
4.4. Discussion Regarding the Access Level for for the Autotopisms in the Subgroup
Discussion Regarding the Access Level for for the Autotopisms in the Subgroup
in [
6]. This access level uses the subgroup of Atop(
K) generated by
. As
is an autotopism based upon length 3 cycles and
and
are based upon length 2 cycles, this subgroup of Atop(
K) consists of eleven non-trivial autotopisms, these autotopisms are;
The example in [
6] suggests that, when
is generated by
, the union of the
-orbits Orb
and Orb
should be uniquely
-completable to
K. However, combining these
-orbits generates the partial Latin square
, where;
As the intercalates , and are missing from , it is not uniquely completable under the autotopism . A triple present in any one of these intercalates will generate an -orbit that spans all three intercalates under the subgroup of Atop(K) generated by ,,. Hence, to make this an access level, one triple from the set should be included in the set of triples.
There are multiple
-critical sets that may be formed using this subgroup of Atop(
K). As discussed in
Section 3, each autotopism within the autotopism group Atop(
K) has a unique action. When multiple autotopisms are combined in an
-critical set, each autotopism generated by the union of any subgroup of autotopisms will also take on a unique action. Observe that in combination, the subgroup of Atop(
K) generated by autotopisms
takes a triple
and maps it to every other triple within the same intercalate. The autotopism subgroup generated by
maps each
to all other triples in the
th row of the Latin subsquare
. This means that the combined action of the autotopism subgroup generated by
takes a triple
and maps
to all triples in
th and
mod 6 row of
K. Hence, any
-critical set under the subgroup of autotopisms
must contain 3 triples, with one triple in either the 0th or 3rd row, one triple in either the 1st or 4th row and finally one triple in either the 2nd or 5th row. This ensures that the
-orbits contain a critical set of each intercalate
and each Latin subsquare
.
Therefore, exactly one entry must be chosen from each of the following three sets; {,,,}, {,,} and {,,,}, as each individual set contains all entries of the ith and th rows, where .
4.5. Discussion Regarding the Access Level for for the Autotopisms in the Subgroup
Discussion Regarding the Access Level for for the Autotopisms in the Subgroup
in [
6]. This access level uses the subgroup of Atop(
K) generated by
. As
and
are both autotopisms based upon length 3 cycles, and
is an autotopism based upon length 2 cycle; this subgroup of Atop(
K) will consist of 17 non-trivial autotopisms. Example 4 states that autotopism
maps a triple
, where
to the other two triples in the
ith row of the Latin subsquare
, while the autotopism
maps each triple
to the other two triples in the
jth column of the Latin subsquare
and the autotopism
maps a triple
, where
, to the triple
mod 6. This means that the subgroup of autotopisms generated by
,
and
will map a triple
, for
to all other triples in the Latin subsquare
, as well as all triples in the Latin subsquare
mod 6
.
The access level in the example in [
6] suggests that this subgroup of Atop(
K) should be combined with the triples {
,
} and from here it should be possible to generate the Latin square
L. However, when
is generated by
, Orb
∪ Orb
is the partial Latin square
, where:
The entries of the Latin subsquares and are missing from the partial Latin square , hence by Lemma 2, is not uniquely completable to K. To amend this access level, either or should be removed and replaced with a triple from the set .
There are multiple pairs of -orbits that constitute an -critical set when is the subgroup of Atop(K) generated by . As an -orbit of a triple under these autotopisms will span two adjacent Latin subsquares and mod 6, when each -orbit contains a critical set of each intercalate . Therefore, a second -orbit is only required to ensure that the union of -orbits contains a critical set of the Latin subsquares mod 6 and mod 6. Hence, any two triples , where will generate an -critical set under the autotopisms , and providing that if is a triple in some Latin subsquare , then the triple is either in the Latin subsquare or the Latin subsquare . All triples in the set belong either to the Latin subsquare or the Latin subsquare , while triples in the set belong either to the Latin subsquare or the Latin subsquare . Therefore, if and then the union of the -orbits Orb∪ Orb will be an -critical set, when is generated by .
4.6. Discussion Regarding the Access Level for the Autotopisms in the Subgroup
Discussion Regarding the Access Level for the Autotopisms in the Subgroup
in [
6]. Whereas other access levels given in the example in [
6] contain too little information, the access level specified for the subgroup of Atop(
K) generated by
gives too much information.
The subgroup
consists of 5 non-trivial autotopisms, these are autotopisms denoted by;
,
,
,
and
. The example suggests that the
-orbits, where
is generated
, for the triples {
,
,
,
,
} should be an
-critical set. However, the union
-orbits of these triples is the partial Latin square
, where;
Observe that is uniquely completable to L, however, access levels are supposed to provide the minimal amount of information required to generate the original key. Note that if either one of the shares or were to be removed from this access level, then one is still able to generate a uniquely -completable partial Latin square, hence the specified set of triples is not an -critical set when is generated by . To amend this, each access level should be defined in such a way that only one triple from the set is included.
4.7. Summary of Findings
The above subsections discuss amendments to particular errors in the example in [
6].
Following this, it is possible to generalise sets of triples of
T that can be combined with each possible subgroup of the autotopism group Atop(
K) generated by some collection of the autotopisms
,
,
and
. Using the results discussed in
Section 2 and
Section 3, it is possible to generalise combinations of triples that form
-critical sets under the subgroups of Atop(
K) defined by the autotopisms
,
,
and
.
Table A1 in
Appendix A details the combinations of triples that will generate a
-critical set when combined with the autotopisms stated in the same row of the table. Reasoning behind the constructions of certain
-critical sets in
Table A1 in
Appendix A is outlined in
Section 4.
Table A2 in
Appendix A provides an example of an
-critical set for each subgroup of autotopisms generated by elements of the set
.
5. Conclusions
In this correspondence, minor errors in the original definitions of the
-critical sets detailed within the paper [
6] are amended. The importance of Lemma 2 in determining both critical sets and
-critical sets within a Latin square is highlighted.
Lemma 2 states that if a partial Latin square P does not contain a critical set for each Latin subsquare , where L is a Latin square, P is not be uniquely completable to L. Further, let a partial Latin square , where L is a Latin square and let denote a subgroup of the autotopism group of L. If the -orbits of a partial Latin square P, do not contain a critical set for each Latin subsquare , then the combination of these triples and autotopisms do not form an -critical set. Lemma 2 can therefore be used to eliminate several partial Latin squares that are not -critical sets of a Latin square L.
By considering
-orbits that satisfy Lemma 2,
-critical sets of a Latin square
K can be generated, where:
The
-critical sets detailed within the correspondence use subgroups of the autotopism group of
K to generate all possible combinations of the autotopisms
,
,
and
, where;
The -critical sets generated by the -orbits of the triples (0,4;4),(1,1;2),(1,5;3),(2,2;1),
(2,4;3),(3,1;4),(3,2;5), (3,3;0),(4,0;4),(5,3;2),(5,5;1) ⊆ Ent(
K) are listed in
Table A1 of
Appendix A. For comparison, the suggested
-critical sets for the example in [
6] are listed in
Table 1 in
Section 1.
If a partial Latin square P satisfies Lemma 2, this does not guarantee that P is uniquely completable to a Latin square L; however, Lemma 2 does provide a necessary condition, that if not met, means a partial Latin square P is not uniquely completable. Lemma 2 can then be applied to all partial Latin squares P of order n. In other words, by looking at all Latin subsquares of order m within a Latin square L of order n, where , one can ascertain the critical sets of each Latin subsquare Q within L. Each partial Latin square P that is uniquely completable to L then contains some combination of critical sets of Latin subsquares of L, hence by determining the Latin subsquares of L, the problem of generating the critical sets of L is reduced in size. This approach may similarly be applied to -critical sets or -critical sets.
Further work is needed to determine necessary conditions for ensuring that a partial Latin square P is a critical set of a Latin square L, but by the application of Lemma 2, it may be possible for larger Latin squares of order n to be analysed.