Attacking Privacy in a Fully Private Auction Protocol