Unknown Key-Share Attacks on the Station-to-Station (STS) Protocol