1
See
handout 17
for further results on the security of
BBS
.