[zooko_LeastAuth]

Taylor Hornby has written a good introductory explanation of the Known Plaintext Attack model and the more powerful attack models, in the context of the Telegram cracking contest:

http://www.cryptofails.com/post/70546720222/telegrams-crypta...