Short ciphertext forgery