This can be more difficult than it appears , as even partially chosen ciphertexts can permit subtle attacks .
This can be more difficult than it appears , as even partially-chosen-ciphertexts can permit subtle attacks .