adaptive chosen-plaintext attack