Adaptive chosen-ciphertext attacks