Read this on De-anonymizing alt.anonymous.messages. The linked to PDF discusses many of the attacks that can be performed on a secure messaging system. It's very thorough.

http://ritter.vg/blog-deanonymizing_amm.html