3 ms·
Only the BCLO scheme (http://www.cc.gatech.edu/~aboldyre/papers/bclo.pdf http://www.cc.gatech.edu/~aboldyre/papers/bclo.pdf) has that particular leakage, which
by swordswinger12 10y ago
Only the BCLO scheme (http://www.cc.gatech.edu/~aboldyre/papers/bclo.pdf http://www.cc.gatech.edu/~aboldyre/papers/bclo.pdf) has that particular leakage, which is (roughly speaking) the first half of the plaintext bits, not sqrt(n) bits.