In the worst case , a chosen-plaintext attack could expose secret information after calculating the secret key .
In the worst case , a chosen-plaintext attack could reveal the scheme 's secret key .