A public key escrow program as in claim 14 wherein said proof of knowledge protocol comprises a routine for computing that ye =xhc mod n where x and y are parameters received from the sending program, c is a parameter generated in the same manner as in the sending program, e is the public exponent and n is the modulus of the certifier of the certificate possessed by the sending program, and h is t