[lxgr]

I'm not too sure, but I suspect that due to how they do group vs. individual message encryption, this might decrease forward secrecy somewhat.