A new efficient construction for wide S-boxes
I have been searching for a wide, computable S-box construction for some time. My previous attempt was seriously flawed. Recently I became aware of a construction based on Hidden Weighted Bit Functions, which have some provable and desirable properties. During the presentation it became clear that there are also some remaining undesirable properties. Work continues.