|  | @@ -3696,7 +3696,7 @@ Changes in version 0.2.3.4-alpha - 2011-09-13
 | 
	
		
			
				|  |  |        by an attacker who controls both an introduction point and a
 | 
	
		
			
				|  |  |        rendezvous point, and who uses the malleability of AES-CTR to
 | 
	
		
			
				|  |  |        alter the encrypted g^x portion of the INTRODUCE1 cell. We think
 | 
	
		
			
				|  |  | -      that these attacks is infeasible (requiring the attacker to send
 | 
	
		
			
				|  |  | +      that these attacks are infeasible (requiring the attacker to send
 | 
	
		
			
				|  |  |        on the order of zettabytes of altered cells in a short interval),
 | 
	
		
			
				|  |  |        but we'd rather block them off in case there are any classes of
 | 
	
		
			
				|  |  |        this attack that we missed. Reported by Willem Pinckaers.
 |