An encryption method to fight against the chosen-message attack. However, in this model, if one ciphertext block is damaged, all the subsequent plaintext blocks will be damaged and then they cannot be decrypted accurately.