A Shuffle Argument Secure in the Generic Model