Known-Key Distinguishing and Partial-Collision Attacks on GFN-2 with SP F-Function

Table 2

Difference propagation from the 5-round inbound structure of 4-branch GFN-2.

i	ΔXi,0	ΔXi,1	ΔXi,2	ΔXi,3
–5	?	?	ΔP(1)	?
–4	Δ1	ΔP(1)	?	?
–3	ΔP(1)	?	0	Δ1
–2	0	0	Δ1	ΔP(1)
–1	0	Δ1	0	0
0	Δ1	0	0	0
1	ΔP(1)	0	0	Δ1
2	Δ1	0	Δ1	ΔP(1)
3	ΔP(1)	0	0	Δ1
4	0	0	Δ1	ΔP(1)
5	0	Δ1	0	0
+1	Δ1	0	0	0
+2	ΔP(1)	0	0	Δ1
+3	?	0	Δ1	ΔP(1)
+4	?	Δ1	ΔP(1)	?
+5	?	ΔP(1)	?	?