CCA-Security with Optimal Ciphertext Overhead