It used to double-encrypt it, relying on the fact that second
encrypt() call was (like XOR) negating the effect of the
first one.