Cryptanalysis of secure addition chain for SASCapplications
Sung‐Ming Yen · Electronics Letters · 1995
A security analysis of a recently proposed technique, the secure addition chain (SAC), used to improve the performance of server-aided secret computation (SASC) protocol is given. It is shown that without taking certain precautions, the secret information can be easily derived from the secure addition chain and the SASC protocol with the aid of SAC will be insecure. A countermeasure is also given based on a recommended nonuniformly distributed random number generator.