2

Is there an efficient algorithm which can be used to determine the branch number of any given linear mapping?

Monster
  • 35
  • 3

1 Answers1

3

As explained in the answer to the question here the branch number of a linear mapping $$ A:F_q^n \rightarrow F_q^n, \quad x\mapsto A\cdot x $$ is the minimum weight of the linear code generated by the matrix $$ G=[~I~|~A]. $$ For an arbitrary matrix $A$ this problem is NP hard, i.e., very hard. For structured matrices like the MDS matrix in AES the answer is known, see the link.

For the hardness result see Vardy's paper "the intractability of computing the minimum distance of a code". It or a related version is also available on citeseer. Since this code is linear minimum distance equals minimum weight.

https://ieeexplore.ieee.org/document/641542

kodlu
  • 25,146
  • 2
  • 30
  • 63