Indifferent chosen-ciphertext attack