Branch number

The branch number concept is not limited to the linear transformations, Daemen and Rijmen provided two general metrics: • differential branch number, where the minimum is obtained over inputs of that are constructed by independently sweeping all the values of two nonzero and unequal vectors , (\oplus is a component-by-component exclusive-or): B_d(F) = \underset {a \ne b} {\min} (W(a \oplus b) + W(F(a) \oplus F(b)); • for linear branch number, the independent candidates \alpha and \beta are independently swept; they should be nonzero and correlated with respect to (the LAT(\alpha,\beta) coefficient of the linear approximation table of should be nonzero): B_l(F) = \underset {\alpha \ne 0,\beta,LAT(\alpha,\beta) \ne 0} {\min} (W(\alpha) + W(\beta)). ==References==