On privacy homomorphisms

This paper shows that two additive privacy homomorphisms proposed are insecure under a ciphertext only attack and the other two can be broken by a known plaintext attack and introduces the notion of an R-additive privacy homomorphicism, which is essentially an additive privacy Homomorphism in which only at most R messages need to be added together.