Known-key distinguisher