Substitution-Permutation Networks Resistant to Differential and Linear Cryptanalysis
H. M. Heys and S. E. Tavares
Volume 9, Number 1, 1996, Pages 1-19