We will begin by the following definition of the Euler quotient modulo a product of two distinct odd primes. Let and be two distinct odd primes. For a nonnegative integer that is relatively prime to , the Euler quotient is defined as a unique integer in with
where is the well-known Euler-phi function. We also define if and are not relatively prime.
It can be seen easily that the Euler quotient has the following property:
where and is relatively prime to
In 2010, Chen, Ostafe and Winterhof introduced families of binary sequences using Fermat/Euler quotients. Since then several nice cryptographic properties of these sequences were proved in [6, 7, 8, 3, 5, 4]. Based on the distribution and algebraic structure of the Fermat quotients, the linear complexity was determined for a binary threshold sequence defined from Fermat quotients . Naturally, the definition of the Euler quotient can be generalized by the Euler’s Theorem 
. Chen and Winterhof extended the distribution of pseudorandom numbers and vectors derived from Fermat quotients to Euler quotients. Moreover, linear complexities were calculated for binary sequences derived from Euler quotients with prime-power modulus. Trace representations and linear complexities were investigated for binary sequences derived from the Fermat quotient . Subsequently, a trace representation was given for a family of binary sequences derived from Euler quotients modulo a fixed power of a prime . Chen and Winterhof generalized the Fermat quotient to the polynomial quotient in . Then the -error linear complexity was determined for binary sequences derived from the polynomial quotient modulo a prime  or its power , respectively. In , a series of optimal families of perfect polyphase sequences were derived from the array structure of Fermat-quotient sequences. All of the above results show that pseudorandom sequences derived from Fermat quotients, Euler quotients or their variants can be regarded as an important class of sequences from a cryptographic point of view.
In this paper, we study binary sequences derived from the Euler quotient modulo . Using the same notation as above, a binary threshold sequence from the Euler quotient modulo can be defined as
For our purpose, we introduce the concept of the linear complexity of binary sequences now. The linear complexity of an -periodic sequence over the binary field is the smallest nonnegative integer for which there exist elements such that
Let be the generating polynomial of . By , the minimal polynomial of is defined as
where denotes the greatest common divisor of two polynomials over and the linear complexity of is
Note that the linear complexity is of fundamental importance as a complexity measure for binary sequences in sequences designs [12, 15, 16]. Besides the measure of the linear complexity for sequences, other measures are also required according to different specific requirements from applications, for example, low autocorrelation or cross-correlation [24, 25], good nonlinear properties [27, 18, 26], and -error complexities [10, 9]. For a binary sequence to be cryptographically strong, the linear complexity of the sequence should be at least a half of the least period of the sequence in order to resist the attack of Berlekamp-Massey algorithm [20, 12].
The main contribution of this paper is to determine the minimal polynomial and the linear complexity of the sequence defined in (3). We state our main result as follows.
Let and be two distinct odd primes with dividing . Assume that Then the binary threshold sequence defined in (3) has period at least The minimal polynomial of is
where denotes the -th cyclotomic polynomial for any positive integer and the linear complexity of is
To the best of our knowledge, this is the first time to introduce this kind of sequences on basis of the Euler quotient modulo a product of two distinct odd primes. Under the condition that divides , we will show that the binary sequence has period at least . Furthermore, minimal polynomials and linear complexities of this class of binary sequences are determined. It turns out that the proposed sequences have high linear complexities and may be useful in cryptography and digital communications.
By using the generalized cyclotomic techniques, one can also construct other binary sequences with period . We refer the reader to see [13, 2, 17] for more details. We emphasize that our results are new. In particular, we point out that our results are not one special case of Theorem 4.2 of  although both may give a sequence with period . In fact, this can be seen easily by comparing linear complexities of the two families of binary sequences.
Ii Proof of Main Results
In this section, we are devoting to the proof of the main results.
We first show that is one of the periods of sequence under the condition that is a divisor of . Setting in (2), we see that
which implies for all . Thus the sequence is periodic with period . We will demonstrate that is the least period of the sequence in the following lemma.
With the notation above, the sequence has period at least .
We first prove that is not a period of the sequence . By (2), we have
It follows from that the -th term of the sequence is equal to 1, i.e., . Note that according to the definition of the sequence . Hence is not a period of the sequence .
Now we prove that is not a period of the sequence . We can assume that is a period of the sequence . Let . It follows from (2) that and thus . This means that the sequence satisfies . However, we have according to the definition of the sequence and It follows that , a contradiction.
Hence the least period of the sequence is which completes the proof of the lemma.
For any integer , we denote by all representatives for the residue classes of integers modulo and by all representatives that are relatively prime to in respectively. Since the least period of is , we restrict the action of on sometimes. With a slight abuse of notation, we shall still use the same symbol to denote this restriction of the Euler quotient on .
Let be a fixed common primitive root of both and . The Chinese Reminder Theorem(CRT)  guarantees that there exists an element of such that
Put and where lcm denotes least common multiple. Then the unit group of the ring  can be written as follows
The following lemma shows that the map is a group homomorphism when we restrict the action of the map to the unit group .
Let be the map from to where contains exactly all of the residue classes which are divisible by in the addition group . Then is a surjective group homomorphism.
Let and be defined as above. Then the image and kernel of is given as
Note that for . We can write for some integer . Substituting it into (1), we have
as divides . This means that is divisible by and thus the map is well defined.
For it follows from the Euler’s Theorem that
which yields the map is a group homomorphism.
Now we show that the map is surjective. There exists some integer such that with since is a primitive root in . This implies that
Note that . It follows from the CRT that there exists some positive integer with such that
It follows that is one generator of the addition group . Consequently, the map is surjective and .
It is known that both and are divisible by . Also,
On the basis of the CRT, we have . Hence . Observe that . We can write . Hence
Combining the above equation with , we get Therefore, we have
Now we need to show that the kernal and the subgroup have the same cardinality. By the Third Isomorphism Theorem , we have
This yields that are all cosets of the subgroup of . It follows that . On the other hand, according to the Fundamental Homomorphism Theorem , we see that
and so . This completes the whole proof of the lemma. Note that Lemma 2 gives that with some . This means that by the CRT. Let be the inverse of in , i.e., . Define in . Then
by the homomorphism property of the map . It follows from that
Combining the above equality with , we get . The following lemma describes a partition of which will give a new explanation of the definition of the sequence .
Let be an element in with Define
for Then and for all .
We first prove that for all . Note that Lemma 2 gives that It is easy to see that for with we have
This implies that . Conversely, for , we have
by the homomorphism property of . This means that
Therefore, there exists some element such that
Hence we have and so . This completes the whole proof of the lemma.
By the definition of and , Lemma 3 gives that for Let . The sequence can be rewritten as
The new explanation of the sequence will be helpful to determine linear complexities. We will make extensive use of the following lemmas for completing the proof of Theorem 1.
For any if for some we have
where all the subscripts are certainly understood modulo . In particular, for .
If and , then and with . Hence This implies that . Conversely, it can be seen easily that . This finishes the proof of the lemma.
The study of the behavior of the coset under modulo various divisors of leads to a number of useful lemmas.
For we have the following two multiset equalities
where is the multiset in which each element of appears with multiplicity , and
where is the multiset in which each element of appears with multiplicity .
For with some fixed it can be written as for and Recall that with some fixed in Lemma 3. Then in and so
According to we see that is also a primitive root of . If we fix some , then runs through when run throughs . Now we count the multiplicity of each element in when and run through and respectively. Assume that
where This means that
for . According to it is equivalent to
There exists many solutions in the form of Note that has choices. This implies that there are many elements of mapping into one element in In a similar manner, we can prove the second multiset equality in the lemma. This completes the whole proof of the lemma.
For we have
It is obvious that the map from to with is well-defined. Thus it is sufficient to prove that the map is one-to-one since both and have the same cardinality.
For we write and with and respectively. Assume that
We will illustrate that and .
as . It follows from the CRT that
This implies that
Note that . It follows from the above equality that
This gives that
Since and belong to , we have . In the following, we will show that on the basis of the fact that . Now we have
Since , it follows that
Recall . It follows from the above equations that
Since and belong to , we have . This completes the whole proof of the lemma.
Let be the same notations as above. For we have the following multiset equality
where and denote and respectively. The set is contained in and is the multiset in which each element of appears with multiplicity .
This means that belongs to indeed. So the map from to with is well-defined. Now we count the multiplicity when runs through the set . Assume that
for some fixed It follows that
There exists many solutions for in the form of Note that has choices. Altogether, there are many elements of mapping into one element in This finishes the proof of the lemma.
Define There exists an important connection between the polynomial and the cyclotomic polynomial that will allow us to determine the minimal polynomial of sequences
Let be a fixed -th primitive root of unity and an element in . Then
We distinguish two cases according to the distinct value of the greatest common divisor of and .
For with , it follows that is a -th primitive root of unity. On the basis of Lemma 6, we have
Note that is equal to the sum of all -th primitive roots of unity that is also the coefficient of the second highest term of the cyclotomic polynomial . According to Exercise 2.57 of , we see that
This indicates that
for with .
For with , it follows that is a -th primitive root of unity. It follows from Lemma 5 and the even parity of that
It follows from the definition of cyclotomic polynomials that
Therefore, we get the desired result since the cyclotomic polynomials and over are relatively prime.
For we have
For with , we see that equals exactly the coefficient of the second highest term of the -th cyclotomic polynomial . It follows from the properties of cyclotomic polynomials (see Exercise 2.57 of ) that This gives the second highest term of the -th cyclotomic polynomial is equal to and so for with .
Recall that . For with , it follows from Lemma 8 that
For with , it follows that is a -th primitive root of unity. On the basis of Lemma 6, we have
This concludes the whole proof of this lemma.
We are now in a position to give a proof of Theorem 1.
[Proof of Theorem 1] For , we denote