Comment by tatersolid

Reminds me of Telegram’s ad-hoc design with so many primitives lashed together without any engineering or analysis. “More crypto” in your implementation is rarely better for security.

This is a great teaching example for the “don’t roll your own crypto” proponents.