Talk:IND-CCA security

From CRYPTUTOR

This needs quite a bit of correction. Most importantly, in the non-adaptive CCA the adversary doesn't get access to the decryption oracle after giving $m_0,m_1\,$ (also remove the loop). In the adaptive version you may keep the loop. I suggest relegating the non-adaptive version to later in the section, and just focusing on the full-fledged (adaptive) version. (Let's meet the week after the test, but you can start fixing it as soon as you get a chance.) --Manoj