[tedunangst]

Pretty sure you can do bit flipping without access to the plaintext...

[sarciszewski]

Yeah. In addition to the Crypto Pals challenges, I actually used this to prove a point (with contrived example):

https://paragonie.com/blog/2015/05/using-encryption-and-auth...