In other words, the attackers allow to mount a chosen message attack where he can submit arbitrary messages of his choice and obtain the corresponding tags for those messages, and then despite the ability to generate arbitrary tags The attacker cannot create a new message-tag pair that was not given to him during the chosen message attack. 