Editing Ciphertext stealing (section)

===CS1===
Arguably the most obvious way to arrange the ciphertext is to transmit the truncated penultimate block, followed by the full final block.  This is not convenient for the receiver for two reasons:
# The receiver must decrypt the final block first in any case, and
# This results in the final block not being [[Data structure alignment|aligned]] on a natural boundary, complicating hardware implementations.

This does have the advantage that, if the final plaintext block happens to be a multiple of the block size, the ciphertext is identical to that of the original mode of operation without ciphertext stealing.