Linear round bit-decomposition of secret-shared values