Comment by rmi_

> So unless that key is leaked

But, just for replayability, we could "patch" the exploit with a known key and see what it does, don't we?