zec
/
zips
mirror of https://github.com/zcash/zips.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

ZIP 316: fix a typo in the description of the attack against a 3-round Feistel. 

Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
Daira Hopwood 2021-05-12 15:31:25 +01:00
parent f42dfd4260
commit 6b1db880c8
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
zip-0316.html
View File

@ -370,7 +370,7 @@ c^{n+m}}{q}\)</span>
<p>Suppose that an adversary has a target input/output pair
<span class="math">\((a \,||\, b, c \,||\, d)\)</span>
, and that the input to
<span class="math">\(G_0\)</span>
<span class="math">\(H_0\)</span>
is
<span class="math">\(x\)</span>
. By fixing

2
zip-0316.rst
View File

@ -517,7 +517,7 @@ A 3-round unkeyed Feistel, as shown, is not sufficient:
Diagram of 3-round unkeyed Feistel construction
Suppose that an adversary has a target input/output pair
:math:`(a \,||\, b, c \,||\, d)`, and that the input to :math:`G_0` is
:math:`(a \,||\, b, c \,||\, d)`, and that the input to :math:`H_0` is
:math:`x`. By fixing :math:`x`, we can obtain another pair
:math:`((a \oplus t) \,||\, b', (c \oplus t) \,||\, d')` such that
:math:`a \oplus t` is close to :math:`a` and :math:`c \oplus t` is close