I agree, it's probably lack of appropriate expertise. There are much more subtle and useful ways to make this intentionally weak (like subtle nonce reuse with GCM). Or just giving Chinese authorities access to the key like the article implies.
No comments yet.