Chained Forgery

A service applies plain CBC-MAC to messages of different lengths without binding the length or domain.

Inspect /api/insane/cbc-mac. Model the internal chaining value, forge an accepted two-block message, and POST its hexadecimal message and tag to /api/insane/cbc-mac/verify.