bison Instantiating the Whitened Swap-Or-Not Construction

Abstract

We give the first practical instancebison-of the Whitened Swap-Or-Not construction. After clarifying inherent limitations of the construction, we point out that this way of building block ciphers allows easy and very strong arguments against differential attacks.