Chosen-plaintext attacks