Category: known-plaintext attack