Therefore, we assume that the bank faithfully executes the

protocol and only makes observations that are part of that

protocol. In particular, he does not act as an onion

router or as a client, only observes messages that are

sent to him, and does not collude with the network

adversary.

"Not collude" part worries me. Can anyone smart enough comment on this?