[Cryptography] The paranoid approach to crypto-plumbing

[John Kelsey]

Arggh!  Of course, this superencryption wouldn't help against the CBC padding attacks, because the attacker would learn plaintext without bothering with the other layers of encryption.  The only way to solve that is to preprocess the plaintext in some way that takes the attacker's power to induce a timing difference or error message away.  

--John