More about the active attack on the server-aided secret computation protocol

Some precautions regarding the one-round active attack proposed by Anderson (see ibid., vol.28, no.15, p.1473, 1992) for RSA-S1 type SASC protocol are discussed when a newly proposed two-phase SASC protocol is considered.