A cryptography operation that combines the ciphertext of one block with the plaintext of the next block.