Is it possible to have a single cyphertext decrypted into two valid plaintexts? If two can be done (yielding 50% compression right there) perhaps more can as well.