> Isn't leaking the length pretty harmless? Whether this is harmless or not is up to a debate. But it is a clear violation of the "information-theoretic securi

> Isn't leaking the length pretty harmless? Whether this is harmless or not is up to a debate. But it is a clear violation of the "information-theoretic security" property that (nearly) every textbook about cryptography mentions or proves for OTP. Just to be clear: these proofs are correct, they just do not work when OTP is applied to a countable set of secrets - which is actually the situation that "everybody" is interested in.