@varx@cybersecurity.theater Setting your own key to all zeroes sure sounds exploitable by a participant to me (and in a group chat it would seem to make a third party actor's work given access only to ciphertext much easier); and truncating a HMAC sounds like something a malicious party along the network data path could do. So I would put both of those in the category of "plausibly exploitable" at least. @soatok@furry.engineer