Comment by eadmund

Their notation is unfamiliar to me, so it's very hard to follow. The scheme I think they're describing relies on sequences of cyphertexts being independent, but surely the government-mandated backdoored protocol could enforce a rule like 'a stream of messages taken two at a time must be first greater than, then less than, one another.' That probably means I'm missing something.