Abstract
In this paper, we study the cyclicity of binary group codes, identifying them as ideals in a group algebra. We focus on the construction of codes, proving that they are self-dual group codes over the abelian group . We demonstrate that for even integers , if the polynomial splits into self-reciprocal irreducible factors, these codes are not permutationally equivalent to any cyclic code. Additionally, we present computational results for binary group codes of length using the MAGMA software (V2.29-4). These results confirm that while all cyclic codes in this range are equivalent to abelian group codes, there exist non-cyclic group codes that cannot be realized as ideals in a cyclic group algebra, highlighting the strictly larger scope of the class of group codes.
1. Introduction
Error-correcting codes have gained importance in post-quantum cryptography, given that some promising post-quantum schemes are based on families of error-correcting codes with good properties. The first proposal in this direction, which has not yet been improved upon, uses binary Goppa codes. This is the well-known McEliece proposal [1].
Group codes are an important family that has been widely studied. In general, “group code” is used as a synonym for “left group code”; that is, the code can be identified with a left ideal of the group algebra , where is a finite field and G is a group. We have studied group codes, specifically, two-sided ideals of the group algebra in our research group. In particular, we have proved that there are group codes that can be obtained using a non-abelian group but cannot be obtained using abelian groups of the same order as G (see [2,3]). Furthermore, such codes exist over arbitrary finite fields (see [4]), and some of them have better parameters than any linear code with the same length and dimension. Specific decoding algorithms for group codes in the semisimple case have been studied (see [5,6,7]).
To better understand group codes, the MAGMA software [8] has been used to find all group codes over the field of two elements, , up to permutation equivalence. We do this for the case of groups of length , given that we know that if , every G-code can be viewed as an abelian group code, which facilitates calculations. A list of such group codes can be found in [9]. Therefore, we know the parameters (length, dimension, minimum distance, weight distribution, and a generator matrix) of all group codes of length .
2. Some Elementary Results
2.1. Group Codes
Hereinafter, will denote a finite field and a finite group of order n. The set of all formal linear combinations of elements of G, , has the structure of an algebra over , called the group algebra of G over . Its product is defined such that, given two elements and :
Definition 1.
A linear code over is said to be a G-code of length if there exists a bijective map mapping such that is a two-sided ideal of .
Definition 2.
A code is called a group code if there exists a group G such that is a G-code.
Remark 1.
If the ideal of is a right ideal (resp. a left ideal), the group code it defines is said to be a right group code (resp. left group code). Thus, it will be understood that all ideals are two-sided unless specified as right or left.
Definition 3.
The group code is called an abelian (resp. metabelian, cyclic, metacyclic, etc.) group code if there exists an abelian (resp. metabelian, cyclic, metacyclic, etc.) group G such that is a G-code.
Hereinafter, n will always denote the length of a code, which, in the case of a group code, will coincide with the order of the group; k will always denote the dimension of the code; and d its minimum distance. The weight distribution of a code will be denoted by and will be the set of pairs , where s is the number of codewords of weight w. Furthermore, an [n,k,d]-code denotes a code of length n, dimension k, and minimum distance d.
2.2. The Dual of a Group Code
Recall that if is an [n,k]-linear code over the field , the dual code of is the [n,]-linear code , where · is the usual scalar product. It is said to be self-dual if . Furthermore, if M is a generator matrix of the code , then the transpose of M, , is a parity-check matrix of its dual code, and (see [10], pp. 1–37). A characterization of linear codes that are group codes can be found in [11]:
Proposition 1.
Let be a linear code of length n over a field and G a finite group of order n.
- 1.
- is a left G-code if and only if G is isomorphic to a transitive subgroup of contained in .
- 2.
- is a G-code if and only if G is isomorphic to a transitive subgroup H of such that , where denotes the centralizer of H in .
Corollary 1.
Since and have the same permutation automorphism group, is a G-code if and only if is also a G-code, where G is a group of order n.
It is clear that for any length n, there exists only one group code of dimension 1: the repetition code , which is cyclic and associated with the ideal of , . Likewise, there exists only one group code of dimension , corresponding to the parity-check code . Note that the latter is the dual of the repetition code. Thus, the study of group codes can be restricted to dimensions k between 2 and , and taking duality into account, it is possible to limit the analysis to dimensions .
2.3. Cyclic and Non-Cyclic Group Codes
The notion of a group code naturally extends that of a cyclic code. Recall that a linear code is cyclic if it satisfies that if and only if . Thus, a linear cyclic code is a G-code where G is a cyclic group. Another alternative view of these codes is through polynomial codes. In this way, a linear cyclic code can be seen as an ideal in the quotient ring , generated by a (unique) monic polynomial such that (see [10], pp. 188–215). The decomposition of this polynomial into irreducible factors allows for the generation of cyclic codes of a certain length and dimension.
In this study, we work with codes up to permutation equivalence. Thus, if and are two linear codes over of the same length n, we say that and are permutationally equivalent, denoted , if there exists a permutation of the set such that if and only if (see [10], pp. 188–215). Similarly, if M is a generator matrix of , then and are equivalent if and only if is a generator matrix of , where P is a permutation matrix [12].
Definition 4.
Given a polynomial , its reciprocal polynomial, denoted , is calculated as: . It is said to be self-reciprocal if .
Proposition 2.
Two cyclic linear codes generated by reciprocal polynomials are permutationally equivalent.
Proof.
Let be an -cyclic code over generated by , where . By definition (see [10], pp. 188–215), the code generated by the reciprocal polynomial is the reciprocal code of . This implies that a codeword belongs to if and only if the codeword belongs to . Since the operation of coordinate reversal is a permutation of the component indices (specifically the permutation for ), and are permutationally equivalent. □
3. Some Code Constructions
3.1. The Product Code
Recall that the Kronecker product of two matrices, and , denoted by , is performed by replacing each element of matrix A with the block formed by the product of that element and the entire matrix B. This results in a matrix of size equal to the product of the matrix sizes, . In this way, the product code of two linear codes, , is constructed. If is an -linear code with generator matrix and is an -linear code with generator matrix , the product code admits as a generator matrix. It will have length equal to the product of the lengths and dimension equal to the product of the dimensions. Furthermore, this product of codes is associative but not commutative, although the product code is permutationally equivalent to (see [10], pp. 567–580).
3.2. Codes
Definition 5.
Let k be a positive integer. The code is the binary linear code of length and dimension k that admits as a generator matrix the matrix whose first k columns form the identity matrix and the last k columns form the matrix with zeros on the diagonal and ones on the off-diagonal elements. That is, the code admits the matrix as a generator matrix, where:
Proposition 3.
If k is even, then the code of length and dimension k is an group code, where G is the non-cyclic abelian group . Furthermore, has minimum distance 4 if .
Proof.
Let be the code of generated by the rows of . Then the permutations and have order k and 2, respectively, and generate an abelian group isomorphic to , and . By Proposition 1 the code is an group code. Every word in is the sum of elements in , the basis linked to the matrix M (see Definition 5). If the word is the sum of r elements in , then the weight of the word is if r is even and k if r is odd. In particular, if , every element in has weight , and elements obtained with have weight 4. □
Proposition 4.
If k is even, the code is self-dual.
Proof.
is self-dual; it suffices to check that all rows of are orthogonal to each other. □
Proposition 5.
Let be an even integer. If the polynomial only admits self-reciprocal irreducible factors, then the code of dimension k is not permutationally equivalent to a cyclic code; that is, the code is not a cyclic group code.
Proof.
Suppose, for the sake of contradiction, that is permutationally equivalent to a cyclic code . We know from Proposition 4 that is a self-dual code. Since permutation equivalence preserves the dot product and dimension, the cyclic code must necessarily be self-dual.
A cyclic code of length is self-dual if and only if its generator polynomial (which is a divisor of of degree k) satisfies the self-duality condition:
where denotes the reciprocal polynomial of . In a field of characteristic 2, we have the identity , so the condition is rewritten as:
Let us analyze the structure of under the hypothesis of the statement. Let
be the decomposition into irreducible factors. By hypothesis, each factor is self-reciprocal, that is, . Since divides , its irreducible factors must belong to the set . Since all these factors are self-reciprocal, the product of any combination of them will also be self-reciprocal. Consequently, is necessarily self-reciprocal:
Substituting this into Equation (1), we obtain:
Taking the square root (a unique operation in characteristic 2, since the Frobenius endomorphism is injective), we conclude that the generator polynomial is unique:
If the generator is , the code contains the codeword corresponding to the polynomial:
The weight of this codeword is . This implies that the minimum distance of the cyclic code is . However, by Proposition 3, we know that for (and even), the minimum distance of the original code is . This contradiction () demonstrates that the initial assumption is false. Therefore, cannot be equivalent to a cyclic code. □
Corollary 2.
If , with p a prime number such that 2 is a primitive root modulo p (that is, ), then the code of length and dimension k is not permutationally equivalent to any cyclic code.
Proof.
Consider the factorization of over . Given that , we have . The condition guarantees that the cyclotomic polynomial is irreducible in . The result follows from the previous proposition. □
4. Cyclicity of Binary Abelian Group Codes
As a particular case of computational interest, it has been verified that for any positive integer , every cyclic linear code of length n over the field of two elements is permutationally equivalent to a group code over the group algebra , for any non-cyclic abelian group G of order n. This verification has been carried out exhaustively using the MAGMA software [8]. For each length and each dimension , all existing binary linear cyclic codes have been generated. Subsequently, it has been verified that each of them is, up to permutation equivalence, a group code over the algebra for any non-cyclic abelian group G of order n. This allows us to ask whether this fact holds for non-cyclic binary group codes and whether it can be generalized to non-abelian groups or extended to other lengths.
In the case of non-cyclic abelian binary group codes, this fact does not hold. There exist non-cyclic group codes that cannot be viewed as G-codes for some abelian group G. For example, if , in we can consider the ideal generated by and . The corresponding G-code is a -binary code, with weight distribution
and is non-cyclic.
Indeed, the only binary cyclic codes with parameters are permutationally equivalent to the code generated by the polynomial , whose weight distribution is
Therefore, cannot be equivalent to a cyclic code. This code cannot be viewed as a K-code for the group , but it can be viewed as an H-code for or .
If , the code is permutationally equivalent to the H-code defined by the ideal generated by and . And if , the code is permutationally equivalent to the H-code defined by the ideal generated by and .
Similarly, if , the G-code defined by the ideal generated by is a -code with weight distribution
This code is not permutationally equivalent to any other non-cyclic abelian code in where G is an abelian group other than .
5. Group Codes Associated with a Non-Principal Ideal
In contrast to the semisimple case, in the non-semisimple case, there exist ideals that are not principal. In fact, there exist group codes that are not permutationally equivalent to any group code obtained via a principal ideal. For example, the -binary group code over for from the previous section is not permutationally equivalent to any group code linked to a principal ideal.
In other cases, there exist group codes constructed with a non-principal ideal that are permutationally equivalent to group codes obtained with principal ideals. For example, if , in we can consider the ideal generated by and .
The corresponding G-code is a -binary code, with weight distribution
and is non-cyclic. Indeed, the only binary cyclic codes have parameters and are permutationally equivalent to the code generated by the polynomial . Therefore, cannot be equivalent to a cyclic code.
For this group code , one cannot find a principal ideal of with that generates a code permutationally equivalent to it. However, one can find a principal ideal of with , , or , that generates a code permutationally equivalent to it.
If , the code is permutationally equivalent to the H-code defined by the ideal generated by . If , the code is permutationally equivalent to the H-code defined by the ideal generated by . And if , the code is permutationally equivalent to the H-code defined by the ideal generated by .
6. Some Properties
In [13], it is shown that every abelian group code associated with a minimal ideal in a semisimple algebra is permutationally equivalent to a cyclic one. The result is not true if the condition of minimality is removed. For example, if , the ideal in generated by defines a -code, which is the product code of the cyclic code in of length 3 and dimension 2 generated by the polynomial , with itself, and has weight distribution
This code is not minimal (the only minimal ideals have dimensions 1 and 2) and is not cyclic.
What happens if we do not require the semisimplicity of the group algebra? For (where we know that all group codes are abelian group codes), the result remains true if . However, it is not known what happens in the general case.
7. Conclusions
In this work, we have investigated the relationship between cyclicity and group codes over binary fields. We have formally defined and analyzed codes, proving their self-duality and establishing conditions under which they are strictly non-cyclic. Our computational survey of codes with length confirms that while every binary cyclic code in this range is equivalent to an abelian group code, the class of group codes is strictly larger, containing optimal codes that do not possess a cyclic structure. These findings highlight the richness of group codes beyond the cyclic case. Future research will focus on extending these classifications to non-abelian groups and exploring the decoding capabilities of these non-cyclic structures.
Author Contributions
All authors equally working on the topic. All authors have read and agreed to the published version of the manuscript.
Funding
This work was funded by the European Union through the Spanish National Cybersecurity Institute (INCIBE) within the Recovery, Transformation and Resilience Plan–Next Generation EU, under the Spain Digital Agenda 2026 framework (project MRR-MAETD:24-INCIBE-001). PECIEE project, funded by INCIBE. This project is part of the actions of Axis 2 of C15.I7, of the Recovery, Transformation, and Resilience Plan, whose objective includes the “Promotion of Industry,” Pillar (2): “Support for R&D&I in Cybersecurity as a transformative element of the country.” Specifically, it contributes to the activities of CID 453, an indicator established by the European Commission (“Launch of the program to support the national cybersecurity industry, the global security innovation program, and related actions”), fulfilling the objectives set out in the indicator description: development of high value-added solutions and services in the field of cybersecurity; and training and development of specialized talent in the field of cybersecurity”.
Data Availability Statement
The data presented in this study are available on request from the corresponding author. The data are not publicly available due to privacy restrictions.
Conflicts of Interest
The authors declare no conflicts of interest.
References
- McEliece, J. A Public-Key Cryptosystem Based on Algebraic Coding Theory; DSN Progress Report; Jet Propulsion Laboratory: La Cañada Flintridge, CA, USA, 1978; pp. 114–116. [Google Scholar]
- García, C.; González, S.; Markov, V.; Martínez, C.; Nechaev, A. Group codes which are not Abelian group codes. J. Algebra Its Appl. 2013, 12, 123–127. [Google Scholar]
- García, C.; González, S.; Markov, V.; Martínez, C.; Nechaev, A. New examples of non-abelian group codes. Adv. Math. Commun. 2016, 10, 1–10. [Google Scholar] [CrossRef] [Scilit]
- García, C.; González, S.; Markov, V.; Martínez, C. Non-abelian group codes over an arbitrary finite field. J. Math. Sci. 2017, 223, 504–507. [Google Scholar] [CrossRef] [Scilit]
- Martínez, C.; Molina, F. The syndromes decoding algorithm in group codes. Finite Fields Their Appl. 2023, 89, 102166. [Google Scholar] [CrossRef] [Scilit]
- Martínez, C.; Molina, F. Two Decoding Algorithms in Group Codes. In Libro de Actas XVII Reunión Española sobre Criptología y Seguridad de la Información; Universidad de Cantabria: Santander, Spain, 2022; pp. 157–161. [Google Scholar]
- Bernal, J.J.; del Río, A.; Simón, J.J. Partial Permutation Decoding for Abelian Codes. IEEE Trans. Inf. Theory 2013, 59, 5152–5170. [Google Scholar] [CrossRef] [Scilit]
- Bosma, W.; Cannon, J.; Playoust, C. The Magma Algebra System I: The User Language. J. Symb. Comput. 1997, 24, 235–265. [Google Scholar] [CrossRef] [Scilit]
- García, B.; Rúa, I.F. Clasificación de códigos grupo binarios de longitud menor que 24. In XVIII Reunión Española sobre Criptología y Seguridad de la Información; Universidad de León: León, Spain, 2024; pp. 193–197. [Google Scholar]
- MacWilliams, F.J.; Sloane, N.J.A. The Theory of Error-Correcting Codes; Elsevier/North-Holland: New York, NY, USA, 1977. [Google Scholar]
- Bernal, J.J.; del Río, A.; Simón, J.J. An intrinsical description of group codes. Des. Codes Cryptogr. 2009, 51, 289–300. [Google Scholar] [CrossRef] [Scilit]
- Pless, V.S.; Huffman, W.C.; Brualdi, R.A. An Introduction to Algebraic Codes. In Handbook of Coding Theory; Elsevier: Amsterdam, The Netherlands, 1998; Volume I, pp. 13–17. [Google Scholar]
- Chalom, G.; Ferraz, R.A.; Polcino, C. Essential idempotents and simplex codes. J. Algebra Comb. Discret. Struct. Appl. 2017, 4, 181–188. [Google Scholar] [CrossRef] [Scilit]
Disclaimer/Publisher’s Note: The statements, opinions and data contained in all publications are solely those of the individual author(s) and contributor(s) and not of MDPI and/or the editor(s). MDPI and/or the editor(s) disclaim responsibility for any injury to people or property resulting from any ideas, methods, instructions or products referred to in the content. |
© 2026 by the authors. Licensee MDPI, Basel, Switzerland. This article is an open access article distributed under the terms and conditions of the Creative Commons Attribution (CC BY) license.