Harden plaintext authenticator