yeah, if knowing the leading 192 bits of the plaintext (24 octets, per article) lets an attacker break a session encrypted with 256-bit AES, you&#x27;ve got bigger problems than a known-plaintext attack, methinks. :)