Kleptography in Authentication Protocols: Why is it Still Possible?