Adaptive chosen-ciphertext attack