Imagine you have a combination lock where spinning one dial randomizes all the others. The question this paper answers is: if you bolt a random mechanical linkage onto that lock, how often does the old trick of 'spin dial A to undo dial B' still work? Almost never — and the paper proves exactly how fast that 'almost never' kicks in. The committed claim: for inverse-based S-boxes — the core nonlinear component in ciphers like AES, ARIA, and Vision — the probability that a nontrivial linear self-symmetry survives an outer GLn(F2) transformation decays at a rate governed by the smallest prime divisor of the field extension degree n. The authors give matching upper and lower bounds pinning down the leading quadratic exponent. This is not a 'novel framework for studying' — it's a closed-form combinatorial result. Where this sits on the ladder: prior work by Biryukov, De Cannière, and Braeken (2003) classified the two-sided linear equivalences of the inverse function. Dunkelman et al. and others used ad hoc methods or computational search to check specific S-boxes for self-symmetries. This paper turns the question from case-by-case computation into a structural theorem. It reduces the symmetry-survival problem to semilinear conjugacy and centralizer estimates in GLn(F2), which is elegant and general. The AES verification is not new as a standalone fact — it has been checked computationally — but the proof here is algebraic, extending to any inverse-based S-box without exhaustive search. The architecture is pure algebra: no algorithms to run, no experiments to replicate. The method chain is (1) rewrite self-symmetry existence as a conjugacy condition in the semilinear group ΓLn(F2), (2) estimate centralizer sizes using the structure of the multiplicative group of the extension field, (3) sum over conjugacy classes to get the probability. The key structural insight is that the smallest prime divisor p of n controls the centralizer dimension, which in turn controls the exponent. For AES (n = 8, smallest prime divisor = 2), the probability is astronomically small; for prime n, it's even smaller. Integrity is strong for a pure-math paper. The results are theorems with proofs, not simulations. The AES result is a corollary of the general bound applied at n = 8. ARIA and Vision are treated as illustrative applications, not cherry-picked showcases. The main potential weakness is standard for algebraic cryptanalysis: the paper addresses linear self-symmetries specifically, leaving open whether more exotic structural properties (nonlinear symmetries, differential-linear interactions) could still be exploitable. The practical upshot is a design-time criterion: if you're building an inverse-based S-box, you can now check whether your choice of outer linear layer is likely to preserve dangerous symmetries without running an exhaustive search. For existing deployed ciphers, this is reassuring — the AES S-box proof is a formal confirmation of what was believed computationally. For future designs, the framework provides a rigidity criterion that is both cheap to apply and provably tight. The obvious next experiment not run: extending the analysis to affine (not just linear) self-symmetries, and to composed S-box constructions where inversion is followed by multiple linear layers (as in Rijndael's actual round function). The authors likely scope to linear symmetries because the semilinear conjugacy reduction is clean there; the affine case introduces translation terms that break the group-theoretic machinery. This reads as a deliberate scope choice for a clean first paper, with the affine extension likely planned.
