Introduction

A ciphertext-only attack (COA) models the scenario where the adversary only has access to a one or more ciphertexts $c_1,c_2,...$. The more restricted model where the adversary is only given one ciphertext $c$ is called single-COA.