raise an exception if ciphertext is too short