BISON Instantiating the Whitened Swap-Or-Not Construction

We give the first practical instance – bison – of the Whitened Swap-Or-Not construction. After clarifying inherent limitations of the construction, we point out that this way of building block ciphers allows easy and very strong arguments against differential attacks.

Joint work with Anne Canteaut, Virginie Lallemand, Gregor Leander, Friedrich Wiemer

Paper | ePrint | Slides