# Tag Info

[Note: This answer is based on k being generated by applying a pseudorandom function to a unique message-ID (counter) each time.] It depends how many times you want to encrypt with it. If you want it as a complicated OTP, then it's secure. In order to see this, just ignore the x parts and note that $s_1m \bmod p$ and $s_2m \bmod p$ are to independent ...