Comment Comment by dnlrn Well, a theoretical attack is worse than no theoretical attack. Especially if there are perfectly fine protocols available that are IND-CCA2 secure. parent dnlrn 11 years ago
