The Sum Can Be Weaker Than Each Part.

Gatan Leurent, Lei Wang

Browse the full EuroCrypt paper archive.