>Jackie Wilson wrote: [snip] >One argument for using this mechanism is that filling the pad bytes with >a predictable value prevents filling them with other things, i.e. >leaking information. I'm not personally arguing for or against, just >making an observation. > I would concur that it's the generation with unleaked data that's important and not the checking. -Bob