Editing Camellia (cipher) (section)

== Design ==
Camellia is a [[Feistel cipher]] with either 18 rounds (when using 128-bit keys) or 24 rounds (when using 192- or 256-bit keys). Every six rounds, a logical transformation layer is applied: the so-called "FL-function" or its inverse. Camellia uses four 8×8-bit [[S-boxes]] with input and output [[affine transformations]] and logical operations. The cipher also uses input and output [[key whitening]]. The [[Diffusion (cryptography)|diffusion]] layer uses a [[linear transformation]] based on a [[Matrix (mathematics)|matrix]] with a [[branch number]] of 5.{{citation needed|date=June 2012}}