how is an ideal cipher different from the ROM (random oracle models)? to read: https://cs.nyu.edu/~dodis/ps/ic-ro.pdf