S-boxes and round functions with controllable linearity and differential uniformity (1995)
Nyberg Kaisa