Mercy uses a 6-round Feistel network structure with partial key whitening. The round function uses a key-dependent state machine which borrows some structure from the stream cipher WAKE, with key-dependent S-boxes based on the Nyberg S-boxes also used in AES.
Mercy employs a 6-round Feistel network structure with partial key whitening. The round function utilizes a state machine that borrows from the stream cipher WAKE, featuring key-dependent S-boxes derived from Nyberg's S-boxes as in AES.