CBC-MAC cookies Exploiting the signature of non fixed size messages with CBC-MAC Exploiting an app using CBC-MAC with control over IV