Finally, the analysis results show that the new protocol is provably secure under DDH assumption and has a much better performance than the current solution.

• 在DDH假定成立的前提下，新的协议在扩展模型中是可证明安全的,并且通信效率和计算效率都优于现有方案。