Malleability of an additive one-time pad (source code)

= Malleability of an additive one-time pad

If an interceptor knows that an additive one-time-pad ciphertext $C$ encrypts plaintext $P$ and wants it to decrypt as $P'$, replacing it by
$$
C'=C-P+P'
$$
works without knowing the key, since $C'=P'+K$.