This is a classic entry-level security mistake. You have to pick a work factor k and then do 2^k iterations of ROT13.