A new mode of using all-or-nothing transforms

We suggest a new mode of using all-or-nothing transforms in conjunct with data encryption. Like Rivest (1997) we aim a slowdown of brute force attacks without extending the key length. However, we use a different scheme which is more efficient and flexible, and ensures that an adversary does not even know the exact ciphertext that has to be attacked.