OK, so we kind of build this meet-in-the-middle, where the two sides, you know, the encryption of m under ki and the decryption of c under k, collided, but if they collided, then we know that in fact this pair, ki and k, is equal to the pair that we're looking for. 