Is there any simple probabilistic MAC $\Pi=(\operatorname{Gen},\operatorname{Tag},\operatorname{Vrfy})$ with UF-CMA security but without UF-CMVA security?
How can an attacker efficiently use the $\operatorname{Vrfy}(\cdot,\cdot)$ algorithm to break the MAC scheme?
Paula