4. (10 points) Suppose that we have a linear block cipher E that encrypts 128-bit blocks of plaintext into 128-bit blocks of ciphertext. Let Ek(m) denote the ciphertest of a 128-bit message m under a key k. Thus, for messages m1 and m2, we have