I currently read about this paper: https://eprint.iacr.org/2015/359.pdf
and I wanted to implement Algorithm 4 / Algorithm 5 on my own. There is one thing I cannot understand: where does function g come from (used in Algorithm 4)? It is said to be a $\mathbb{F}_2$-linear function.
Any ideas?