  Functions with low differential uniformity can be used in a block cipher as
S-boxes since they have good resistance to differential attacks. In this paper
we consider piecewise constructions for permutations with low differential
uniformity. In particular, we give two constructions of differentially
6-uniform functions, modifying the Gold function and the Bracken-Leander
function on a subfield.
