K Nyberg - Advances in Cryptology-ASIACRYPT'96: International …, 1996 - books.google.com
A simple network of small s-boxes can be proven secure against differential and linear
cryptanalysis. Upperbounds of the differential probabilities and the linear correlations are …