# Ciphertext to different plaintext

Is there any algorithm for generating the same ciphertext from different plaintexts, depending on the key used? This seems similar to Honey Encryption, but I don't need to have every key give realistic data. I want to specify a set of keys and corresponding plaintext.

For example, "hey" encrypted with key1 and "bye" encrypted with key2 would both become "aaa". Decrypting with key1 and key2 would succeed and return the corresponding plaintext, while decrypting with any other key would fail.

• Are you referring Key clustering or Key collision, where a collision attack finds two different messages m1 and m2, such that hash(m1) = hash(m2) and a key clustering is two different keys that generate the same cipher text from the same plain text? – Sayan Jun 26 '18 at 0:10