Which of the following is not a defense against a traffic substitution and insertion attack?