In most of current authenticated encryption schemes,the recipient can not prove to a third party that message m and signature s are indeed originated from a specific sender.

• 目前多数认证加密方案中,若签名者否认签名,接收者不能向其他任何人证明签名者签名和消息的有效性。