Geoff Worboys wrote:

> 4: It is subject to replay-attacks because a user of the
> system could easily prime the database with inputs to aid
> later analysis.

Sorry, I think the correct term here is probably a
chosen-plaintext attack, not replay. But then I did warn
you I'm just an amateur. The main point being that combined
with my points 3 and 5 this can be a very useful strategy
against something like ECB.

--
Geoff Worboys
Telesis Computing