Note that now that Si has been XORed to the ouput,
the adversary must reorder the Ns.
Published by Lotus® Freelance Graphics®