[rcorin]

Cool! Also, have you tried giving some bits of the key to the adversary?

[dgacmu]

I haven't. Interesting - that'd be a nice way to try to probe how strong the encryption is (i.e., "bits recovered vs. key bits supplied to adversary"). I'll have to think about that more - thanks for the idea!