Known-Key Distinguishing and Partial-Collision Attacks on GFN-2 with SP F-Function

Figure 5

Differential trail for the 5-round inbound structure of 4-branch GFN-2.