> Does DES (or name your favorite encryption algorithm) produce as output > all possible cyphertexts of length L, given all possible conbinations of > keys and plaintexts of length L? Choose any cyphertext and a random key and decrypt the cyphertext with that key. Now you have a key and a plaintext which produce this cyphertext. Hadmut