Damn! What's the vulnerability? Do they reuse IVs or something? No wonder I got stuck when designing my own encrypted filesystem, I didn't have this assumption. On the plus side, mine was safer. I'll have to revisit it.