# Tag Info

As fgrieu already said, the question is a bit weird. The encryption scheme is not complete in a very strong sense, as there exists no efficient algorithm that can recover $m$ from a ciphertext. But anyway, the definition of CCA security does not require completeness, so let me just answer the question as asked: No the scheme as described is not CCA secure ...