It is proved that the proposed scheme is secure under the BDH assumption and the random oracle model.

• 证明了在BDH问题假设和随机预言机下新方案是安全的。