Susan K. Langford Weakness in Some Threshold Cryptosystems. 74-82 http://dx.doi.org/10.1007/3-540-68697-5_6 1996 conf/crypto/1996 CRYPTO db/conf/crypto/crypto96.html#Langford96