Only the BCLO scheme (http://www.cc.gatech.edu/~aboldyre/papers/bclo.pdf) has that particular leakage, which is (roughly speaking) the first half of the plaintext bits, not sqrt(n) bits.