This version was later found vulnerable to a practical adaptive chosen ciphertext attack .

Early versions of the PKCS standard used wikt : ad-hoc constructions , which were later found vulnerable to a practical adaptive chosen ciphertext attack .
