The length of the payload's plaintext may inadvertently reveal details about its contents (e.g. the number of contributions). To protect against leaking this through the encrypted payload, we may want to pad the plaintext to a fixed size.