Y Todo, M Morii - … Encryption: 23rd International Conference, FSE 2016 …, 2016 - Springer
Ciphers that do not use S-boxes have been discussed for the demand on lightweight
cryptosystems, and their round functions consist of and, rotation, and xor. Especially, the …