"Decryption failure is more likely after success."

Nina Bindel, John M. Schanck (2019)
a service of Schloss Dagstuhl - Leibniz Center for Informatics