The Rao-Nam Scheme is Insecure Against a Chosen-Plaintext Attack.

Ren Struik, Johan van Tilburg

Browse the full CRYPTO paper archive.