4 ms·

Wouldn't that require you to retain all compromised keys, and daisy chain the encryption operations?