Comment by sevg

Don't use this.

It's missing a basic building block: authentication.

Unfortunately, the author hasn't spent long enough researching cryptography. (Even the briefest of research would have made this mistake obvious.)