content: Except if we don't know.  If they compromise a random number generator, which they have, for a common algorithm, which they have, and that algorithm has very few implementations out in the wild, which is the case, then they can find the symmetric key exchanged through it in as little as 30 bytes of crypttext.  I'm of course talking about ECDH. Oh, what's this voat.  (not their fault).