The security of an RSA-based cut-and-choose protocol door T. Veugen