Known-plaintext attack might be possible then, although there are ways to mitigate that.