in reply to Encryption and Active Directory

Update: FWIW, base64 does essentially what your Dr. Sutherland suggests (remapping 6 8-bit characters to 8 6-bit characters), but it also solves the problem of trailing nulls.