Original: In the worst case, a chosen-plaintext attack could reveal the scheme's secret key.
Simplified: In the worst case, a chosen-plaintext attack could expose secret information after calculating the secret key.