Ideal-Cipher Model