A Fast and Key-Efficient Reduction of Chosen-Ciphertext to Known-Plaintext Security