Policy Privacy in Cryptographic Access Control
Attested append-only memory: making adversaries stick to their word