I can apply the decryption algorithm, and then what I'll get is that I'm really looking for keys k1, k2 that satisfy this equation here, where basically all I did is I applied the decryption algorithm using k1 to both sides. 