Alice Bob
Aliceís Public
Encryption key x
c=E(x,doc)
docí=D(s, c)
If doc=docí
Then accept
(s,x)
Intuition for CR2: CCA Non Malleable