On the differential and linear efficiency of balanced Feistel networks