Cryptanalytic Attack

What threat model have we assumed when attacking the ciphers?

• Ciphertext-only

• Known-plaintext

• Chosen-plaintext (The Midway)

• Chosen-ciphertext (Padding oracle attack)