Known-Key Distinguishing and Partial-Collision Attacks on GFN-2 with SP F-Function

Table 3

Transition between the input and output difference forms under the F-function in the outbound phase.

Input difference	Output difference
0	0
Δ1	ΔP(1)
ΔP(1)	?
?	?