Acknowledgements

Some of these ideas have been sharpened in discussions with Roger Needham, David Wheeler, Matt Blaze, Mike Reiter, Bruce Schneier, Birgit Pfitzmann, Peter Ryan and Rajashekhar Kailar; and I am grateful to the Isaac Newton Institute for hospitality while this paper was being written.