Abstract: In a selective-opening (SO) attack on an encryption scheme  an adversary A gets a number of ciphertexts (with possibly related plaintexts)  and can then adaptively select a subset of those ciphertexts