Non-repudiation: parties cannot falsely deny their prior messages (‘only X could have generated message Y’)