In this paper, we study a strategy for constructing fast and practically secure round functions that yield suffciently small
values of the maximum differential and linear probabilities p; q. We consider mn-bit round functions with 2-round SPN structure for Feistel ciphers. In this strategy, we regard a linear transformation layer
as an n× n matrix P over 0,1. We describe the relationship between the matrix representation and the actual construction of the linear transformation
layer. We propose a search algorithm for constructing the optimal linear transformation layer by using the matrix representation
in order to minimize probabilities p; q as much possible. Furthermore, by this algorithm, we determine the optimal linear transformation layer that provides p≤ p5
s; q≤ q5
s in the case of n = 8, where p
s
; q
s
denote the maximum differential and linear probabilities of s-box.