Known-Key Distinguishing and Partial-Collision Attacks on GFN-2 with SP F-Function

Table 1

Hexadecimal representation for two consecutive words.

	0	Δ1	ΔP(1)	?
0	0x0	0x1	0x2	0x3
Δ1	0x4	0x5	0x6	0x7
ΔP(1)	0x8	0x9	0xA	0xB
?	0xC	0xD	0xE	0xF