A Attack Model wherein attackers can: Can distinguish ciphertext from random Has knowledge or ability to choose keys