Which modes of operation—CBC, OFB, and CTR—do not yield CCA-secure encryption schemes?
(a) CBC
(b) OFB
(c) CTR
(d) All of them