Then might turn a $01 into a $00.

The essence of it is that the encrypted data should never be passed around as a string.