Chosen-plaintext attack