Security analysis of an OpenID provider with proxy functionality for the nPA (German ID card)