Key substitution attacks on some verifiably encrypted signature schemes