Direct Construction of Recursive MDS Diffusion Layers using Shortened BCH Codes

Daniel Augot, Matthieu Finiasz

MDS matrices allow to build optimal linear diffusion layers in block ciphers. However, MDS matrices cannot be sparse and usually have a large description, inducing costly software/…