Input (grade 13): This can be more difficult than it appears, as even partially-chosen-ciphertexts can permit subtle attacks.
Output (grade 10): This can be more difficult than it appears, as even partially chosen ciphertexts can permit subtle attacks.