I'm looking at https://link.springer.com/content/pdf/10.1007%2F11496137_31.pdf and it seems like in the protocol they propose if Alice can guess Bob's number, she can pretty easily verify that guess. (Section 3: Our Protocols)
Bob isn't performing any private operation besides generating the random encryptions to fill out the items he's sending back to her. So Alice could do the exact same thing Bob is doing (multiplying together the encryptions corresponding to the digits she thinks are in his number for each zero-bit), and see if they match up to a subset of the terms he sent.
What am I missing here?