Early versions of the PKCS standard used ad-hoc constructions , which were later found vulnerable to a practical adaptive chosen ciphertext attack . This version was later found vulnerable to a practical adaptive chosen ciphertext attack .