This can be more difficult than it appears , as even partially chosen ciphertexts can permit subtle attacks . This can be more difficult than it appears , as even partially-chosen-ciphertexts can permit subtle attacks .