Fixed length messages: repadding Add random junk to the bottom to replace the header you strip off Everything's encrypted, so it looks ok. But: Replay attacks -- a given message always decrypts the same way!