# Tag Info

Can $A$ assume that only $B$ can read the message? Only someone with the private key corresponding to $P_B$ can read the message. If $A$ can assume that only $B$ has it, that works. As $B$ does not know anything about $A$ what is the cryptographic purpose of the MAC? So that someone else cannot modify the encrypted message. What we want to ...