Branching program is one type of NC1 circuit and can be used to compute encrypted data. So whether there exist other methods in the NC1 circuit to compute encrypted data. What's the advantage of branching program? Why we use branching program to compute the encrypted data?
I attached some related papers as follows:
http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.182.4237&rep=rep1&type=pdf
https://eprint.iacr.org/2013/267.pdf