PPT Slide
- Use only XOR operation
- Simple construction
- Efficient implementations in both software and hardware
- Minimize gate counts required for hardware
- Maximize minimum number of
active s-boxes
- Minimize upper bound of maximum differential / linear prob. of round function