On the Key-Compromise Impersonation Vulnerability of One-Pass Key Establishment Protocols