Leakage-Resilience of the Shamir Secret-Sharing Scheme Against Physical-Bit Leakages

theorem to bound the number of solutions to an equation over finite fields. The analysis of our attack relies on determining the "discrepancy" of the Irwin-Hall distribution. A probability distribution's discrepancy is a new property of distributions that our work introduces, which is of potential independent interest.