Wouldn't this scheme still be semantically secure, while defending against the steganography in the paper?
1. encrypt plaintext | 128-bit random value
2. if last cyphertext was greater than its predecessor but less than this cyphertext, go to step 1
3. if last cyphertext was less than its predecessor but greater than this cyphertext, go to step 1
1. encrypt plaintext | 128-bit random value 2. if last cyphertext was greater than its predecessor but less than this cyphertext, go to step 1 3. if last cyphertext was less than its predecessor but greater than this cyphertext, go to step 1