Explicit reduced APN permutations: ramification and optimal Galois-ring lifts

Abstract: Let $m\ge5$ be odd and $q=2<sup>m$. For every odd $r$ with $3\le r&lt;m$ and $\gcd(r,m)=1$ we give the reduced polynomial $$P_{m,r}=\mathrm{red}((T_r<sup>3)<sup>{2<sup>{m-2}})$$, $T_r=\sum_{i&lt;r}X<sup>{2<sup>i}$, explicitly: it has coefficients in $\mathbb{F}<em>2$ and exactly $3r-2$ terms, it is an APN permutation of $\mathbb{F}_q$, and its formal derivative $1+X<sup>{2<sup>{r-2}}+X<sup>{2<sup>{m-2}}$ has no zero on $\mathbb{F}_q$ and is two-to-one. We determine the ramification of $P</em>{m,r}$ as a map of the projective line for all admissible $(m,r)$: there are $2<sup>{m-r}$ finite ramification points, all wild, with index and different exponent $2<sup>{r-2}$, all over the single finite branch value $1$. The $0/1$ lift of $P_{m,r}$ satisfies an identity in $\mathbb{Z}[X]$ that evaluates it over every Galois ring $\mathrm{GR}(2<sup>k,m)$ with $m-1$ squarings, one general multiplication and $r+5$ additions or subtractions. For every quadratic optimal APN permutation $p$ of $\mathbb{F}<em>q$ (in particular $P</em>{m,r}$), every $k\ge2$ and every coefficient lift $F$ of $p$ to $\mathrm{GR}(2<sup>k,m)$, we determine the differential rows of $F$ exactly in the unit directions whose residue lies outside the kernel ${0,ρ}$ of the linear part of $p&#39;$ (they are the residue rows of $p$; $ρ=1$ for $P_{m,r}$) and in the directions in $2<sup>{k-1}\mathrm{GR}(2<sup>k,m)\setminus{0}$ (every nonzero entry equals $2q<sup>{k-1}$). We also give a self-contained proof of the Li--Wang criterion for a Gold function plus a linearised polynomial, which explains why the inner map of $P_{m,r}$ is not a monomial, and record a two-word, two-layer transition that a simple linear layer forbids at the residue level.