# AES/DES question about determine a key

I have a question. If you receive a DES encrypted message for which you would NOT recognize the plaintext if it were decrypted, is there any way to potentially determine the key if all keys are likely? What about for AES?

• Depends... With authenticated modes of encryption it is easy to confirm the key and DES keys could be recovered (AES keyspace is too large). Even with e.g. CBC and a padded message it could be possible, if message length is known (7-8 byte DES padding is probably unique to a single key). – otus Oct 18 '15 at 18:32

No. For any key $k$ your ciphertext $c$ has a corresponding plaintext $p$ (since block ciphers are families of bijections). Hence, since you can't (in)validate plaintexts, you can't discard any possible key.
Or, in other words: If someone claimed the right key was a certain $k$, you had absolutely no way to ever prove them wrong.