
Block ciphers and the data encryption st andard 173
substitution will result in at least half of the output bits changing. This is
in fact not merely desirable, but one of the design characteristics of a good
modern cryptosystem.
Notice how the number of bits that differ increases as the rounds advance.
The number of rounds required for a complete mixing must be enough ...