[Cryptography] Gates are cheap. Should cipher design change?

[ianG]

On 30/03/2016 00:09 am, Jon Callas wrote:
> You might be thinking of The Hasty Pudding Cipher by Rich Schroeppel which is in my opinion the most brilliant of the AES submissions. My comment at the time was that it didn't meet any of the requirements NIST had, but it met requirements they should have had. It's also the first cipher that had what we now call "tweaks."

Curious - what requirements should NIST have had?

And, what are tweaks?

iang