The 2002 "carnival booth" paper by Strauss and Chakrabarti is a good analysis. There's a summary here with some quotes from Hal Abelson http://tech.mit.edu/V12

The 2002 "carnival booth" paper by Strauss and Chakrabarti is a good analysis. There's a summary here with some quotes from Hal Abelson http://tech.mit.edu/V122/N48/48secure.48n.html http://tech.mit.edu/V122/N48/48secure.48n.html