Still using Cypherpunk replies

No replay detection, no batching, messages change length at each hop, etc.

Fix: Do all this stuff for replies too.

Since we want to encrypt replies at each hop, use a cryptosystem where decrypt is as strong as
encrypt.