Malleability of an additive one-time pad
ID: malleability-of-an-additive-one-time-pad
If an interceptor knows that an additive one-time-pad ciphertext encrypts plaintext and wants it to decrypt as , replacing it byworks without knowing the key, since .
New to topics? Read the docs here!