The "[[All-or-nothing transform|all-or-nothing]]" security is from the fact that to recover ''C:M'', one must recover the entire ''DBmaskedDB'' and the entire ''SeedmaskedSeed''; ''DBmaskedDB'' is required to recover the ''seed'' from the ''SeedmaskedSeed'', and the ''seed'' is required to recover the data block ''DB'' from ''DBmaskedDB''. Since any changed bit of a cryptographic hash completely changes the result, the entire ''DBmaskedDB'', and the entire ''SeedmaskedSeed'' must both be completely recovered.
