K NYBERG - … in Cryptology–EUROCRYPT'91: Workshop on the …, 2003 - books.google.com
A perfect nonlinear S-box is a substitution transformation with evenly distributed directional
derivatives. Since the method of differential cryptanalysis presented by E. Biham and A …