@feld @gsuberland @jkmcnk Because one-time-pads don't offer protection against chosen-ciphertext attack.