 At most, the attacker will need to make 256 attempts (one guess for every possible byte) to find the last byte of formula_4.If the decrypted block contains padding information or bytes used for padding then an additional attempt will need to be made to resolve this ambiguity.After determining the last byte of formula_4, the attacker can use the same technique to obtain the second-to-last byte of formula_4.