mirror of https://github.com/zcash/zips.git
ZIP 316: improve resolution and size of Feistel diagrams.
Signed-off-by: Daira Hopwood <daira@jacaranda.org>
This commit is contained in:
parent
935b3ea767
commit
f42dfd4260
|
@ -337,7 +337,7 @@ c^{n+m}}{q}\)</span>
|
|||
<span class="math">\(\mathsf{ceiling}(\ell_R/\ell_H)-1]\)</span>
|
||||
.</p>
|
||||
<figure class="align-center" align="center">
|
||||
<img src="zip-0316-f4.png" />
|
||||
<img width="372px" src="zip-0316-f4.png" />
|
||||
<figcaption>Diagram of 4-round unkeyed Feistel construction</figcaption>
|
||||
</figure>
|
||||
<p>(In practice the lengths
|
||||
|
@ -364,7 +364,7 @@ c^{n+m}}{q}\)</span>
|
|||
<section id="heuristic-analysis"><h4><span class="section-heading">Heuristic analysis</span><span class="section-anchor"> <a rel="bookmark" href="#heuristic-analysis"><img width="24" height="24" src="assets/images/section-anchor.png" alt=""></a></span></h4>
|
||||
<p>A 3-round unkeyed Feistel, as shown, is not sufficient:</p>
|
||||
<figure class="align-center" align="center">
|
||||
<img src="zip-0316-f3.png" />
|
||||
<img width="372px" src="zip-0316-f3.png" />
|
||||
<figcaption>Diagram of 3-round unkeyed Feistel construction</figcaption>
|
||||
</figure>
|
||||
<p>Suppose that an adversary has a target input/output pair
|
||||
|
|
|
@ -477,6 +477,7 @@ concatenation of
|
|||
:math:`\mathsf{ceiling}(\ell_R/\ell_H)-1]`.
|
||||
|
||||
.. figure:: zip-0316-f4.png
|
||||
:width: 372px
|
||||
:align: center
|
||||
:figclass: align-center
|
||||
|
||||
|
@ -509,6 +510,7 @@ Heuristic analysis
|
|||
A 3-round unkeyed Feistel, as shown, is not sufficient:
|
||||
|
||||
.. figure:: zip-0316-f3.png
|
||||
:width: 372px
|
||||
:align: center
|
||||
:figclass: align-center
|
||||
|
||||
|
|
Loading…
Reference in New Issue