there were minor problems in the protocol description / proof, fixed that