Cryptanalytic attack model where the attacker has access to both the plaintext and its encrypted version