K. Nyberg and L. R. Knudsen, “Provable Security Against a Differential Attack”, DPB, vol. 23, no. 473, Jun. 1994.