Rasta: A cipher with low ANDdepth and few ANDs per bit

Publication
In CRYPTO