Misrecover

The third situation in which Massaro et al. (2001) found BMS misrecovered the correct model a high percentage of the time was when Newton’s law (NMP) was compared with a weighted additive version of Newton’s law (WNAV).

In practice, this constraint is a significant limitation because if the key recovery process does not work for only one key byte (because not enough encrypted packets were captured by the attacker from the concerning weak IV class or because a byte of the plaintext is unknown), all the following key bytes will be probably misrecovered.

Especially as the model with the highest number of parameters (the conjunction strategy) is misrecovered most frequently.