2 ms·

I believe that option 2, where it relies on individual encryption at the cost of reading history, is how matrix does it (or can do it if chosen).