Known-Key Distinguishing and Partial-Collision Attacks on GFN-2 with SP F-Function

Figure 4

Matyas-Meyer-Oseas (left) mode and Miyaguchi-Preneel (right) mode.