A threat model where parties follow protocol but try to infer extra information from observed messages.