Hierarchical Key Escrow with Passive Adversaries