Stop-And-Go-MIXes Providing Probabilistic Anonymity in an Open