Remember the attack where C1 and C2 were exchanged by the adversary.
Published by Lotus® Freelance Graphics®