R egarding Baidu IME’s encryption protocol, we stand by our position that it is significantly weaker than state-of-the-art encryption protocols. Regarding performance and reliability, we understand your performance constraints. In fact,

The top-left square represents the first byte of the payload, the square in the first row, second column is the second byte of the payload, etc. [...] This only happens when the application restarts, such as when the user restarts the mobile device, the user switches to a different keyboard and back, or the keyboard app is evicted from memory. [...] Additionally, due to the way the block cipher is constructed, if blocks in the same p ositions of the plaintexts are the same, they will encrypt to the same ciphertext blocks. [...] As an example, if the second block of two plaintexts are the same, the second block of the corresponding ciphertexts will be the same. [...] However, the example in Figure 3 illustrates a case where changing a single bit of the plaintext caused zero bits of the ciphertext to change, a clear v iolation of the expectations of this property.