If we had fixed-ration compression, the attack would be impossible. You could attempt to simulate that: after compression, add random padding so that it looks

If we had fixed-ration compression, the attack would be impossible. You could attempt to simulate that: after compression, add random padding so that it looks like a fixed 2:1 compression ratio. This is wasteful if the data compressed better than 2:1. And if the data doesn't compress as well as 2:1, I'm not sure what you would do. (Maybe do no compression. But now you've leaked a tiny bit of info...)