In a __________________, the attacker discovers a functionally equivalent algorithm for encryption and decryption but without learning the key.