Key-escrowing scheme