The Random Oracle Model and the Ideal Cipher Model Are Equivalent