Deterring voluntary trace disclosure in re-encryption mix networks