Mixing ciphertext and plaintext