IEEE Transactions on Circuits and Systems-I-Regular Papers, Feb, 2005, Vol.52(2), p.443(11)
In this paper, we explore, following Shannon's suggestion that diffusion should be one of the ingredients of resistant block ciphers, the feasibility of designing cryptographically secure substitutions (think of S-boxes, say) via approximation of mixing maps by periodic transformations. The expectation behind this approach is, of course, that the nice diffusion properties of such maps will be inherited by their approximations, at least if the convergence rate is appropriate and the associated partitions are sufficiently fine. Our results show that this is indeed the case and that, in principle, block ciphers with close-to-optimal immunity to linear and differential cryptanalysis (as measured by the linear and differential approximation probabilities) can be designed along these guidelines. We provide also practical examples and numerical evidence for this approximation philosophy. Index Terms--Black cipher, differential cryptanalysis, linear cryptanalysis, mixing dynamical system, periodic approximation, S box.
Ciphers -- Analysis ; Cryptographic Equipment -- Design And Construction