A Note on the Bellare-Rivest Protocol for Translucent Cryptography

We remark that the Bellare-Rivest protocol for translucent cryptography [J. Cryptology (1999) 12: 117-139] can not truly enable the government to decrypt partial encrypted communications