(cryptography) An attack on a cryptosystem that relies on the attacker's ability to choose any ciphertext of their liking and decrypt it into the corresponding plaintext with that system and key. More powerful than a chosen-plaintext attack.