$$P_i = \mbox{head}(E_K (S_{i-1}), x) \oplus C_i$$