Exponential S-boxes. - Sergey Agievich; Andrey Afonenko (IACR Cryptol. ePrint Arch., 2004)