Not really. You can have internal per-packet keys which you throw away after your cryptographic setup and then only convey that key in separately in some encryp

Not really. You can have internal per-packet keys which you throw away after your cryptographic setup and then only convey that key in separately in some encrypted form to each member along with a common payload which is amenable to multicast. I think that's a piece of signal's group chat protocol.