In defense of paranoia in cryptography