On Linear Redundancy in the AES S-Box.
Joanne Fuller, William L. Millan · 2002
We show the existence of a previously unknown linear redundancy property of the only nonlinear component of the AES block cipher. It is demonstrated that the outputs of the 8*8 Rijndael s-box (based on inversion in a finite field) are all equivalent under affine transformation.