Impossible Differential Distinguishers of Two Generalized Feistel Structures

Table 2

(2m−1) rounds differential characteristics of the m-dataline CAST256-like structure from the encryption direction.

Round/output diff
	U	U	U
	U	U	U			U