15.4.2 Avoiding predictability with nonces Recall that an encryption scheme is called probabilistic if it returns different ciphertexts when the same plaintext is repeatedly encrypted. Otherwise, an