adaptive chosen-ciphertext attack