10-Round Feistel is Indifferentiable from an Ideal Cipher.

Dana Dachman-Soled, Jonathan Katz, Aishwarya Thiruvengadam

Browse the full EuroCrypt paper archive.