audit trail
off-card solution?
- Chameleon [Anderson]
- long-term watermarked key block
- watermarks secondary keys - XOR cipherstream
- partial flaw: no protection against leaks to recent group members - MARKS [Briscoe]
demo implementation
- didn't include watermarking