全部

1·It is based on the protocol of Burmester and Desmedt and is provably-secure in the random-oracle and ideal-cipher models.

最后，在随机预言模型和理想密码模型中证明了协议的安全性。