In a modern secure encryption scheme, is it possible (both theoretically and practically) to encrypt a message using a key to get the following ciphertext $c = Enc(M_1,k_1)$ and later find another key so that a different message of my choice gets encrypted to the same ciphertext $c = Enc(M_2,k_2)$?
Decrypt the same ciphertext to multiple messages of my choice if I can use any key I want to decrypt
Asked
Active
Viewed 272 times