adaptive chosen-ciphertext attack attack model authenticated encryption chosen-plaintext attack cryptanalysis cryptographic hash function eurocrypt mihir bellare optimal asymmetric encryption padding provable security rsa semantic security smart card stream cipher victor shoup