done with ECBEncryptionOracle
done with HMAC