Intrusion-tolerant Order-preserving Encryption