I am looking for a 4-bit S-box which has onlyonly 4s in its difference distribution table (except the top left corner) but I was not able to find one in the literature.
Has such an S-box been already published? If not, is it theoretically possible to reach this property? If so, how to proceed?