D. Augot

This work considers N secrets, of which N are linearly independent input values and the remaining N -K secrets are determined by linear computations on these inputs, and analyses the existence of LERS-derived leakage that exploits this structure.