A Note on the Bellare-Rivest Protocol for Translucent Cryptography
  We remark that the Bellare-Rivest protocol for translucent cryptography [J. Cryptology (1999) 12: 117-139] can not truly enable the government to decrypt partial encrypted communications. 
Zhengjun Cao and Lihua Liu
cs.CR