Ah, yes, I was working from the assumption that the attacker starts with an all-zero R (that's what I do), but I wanted to be more general :) 8c97162