Each round has very strong local encryption Confusion : Substitution. done with key-dependent S-boxes, MDS matrices and PHTs done with key-dependent S-boxes, MDS matrices and PHTs ...