From f42dfd4260612b5f827948b420aba84934251672 Mon Sep 17 00:00:00 2001
From: Daira Hopwood
(In practice the lengths
@@ -364,7 +364,7 @@ c^{n+m}}{q}\)
A 3-round unkeyed Feistel, as shown, is not sufficient: Suppose that an adversary has a target input/output pair
diff --git a/zip-0316.rst b/zip-0316.rst
index 9a5814a2..28f8a1e3 100644
--- a/zip-0316.rst
+++ b/zip-0316.rst
@@ -477,6 +477,7 @@ concatenation of
:math:`\mathsf{ceiling}(\ell_R/\ell_H)-1]`.
.. figure:: zip-0316-f4.png
+ :width: 372px
:align: center
:figclass: align-center
@@ -509,6 +510,7 @@ Heuristic analysis
A 3-round unkeyed Feistel, as shown, is not sufficient:
.. figure:: zip-0316-f3.png
+ :width: 372px
:align: center
:figclass: align-center
Heuristic analysis