In the most present authenticated encryption schemes the recipient cannot prove the signer s dishonesty to any verifier if the signer denies the signature.

• 现有的认证加密方案中,如果签名者否认签名,接收者不能向其它任何验证者证实签名者的诚实性。