What I can't figure out in this attack is how kp was found. how to find kp