'Cipher & Hash Function Design Strategies based on linear and differential cryptanalysis' by Joan Daemen

https://cs.ru.nl/~joan/papers/JDA_Thesis_1995.pdf