I&#x27;ve discovered similar issues in TLS implementations, but I don&#x27;t think this is actually a vulnerability without more details. Just because a client will use bad parameters doesn&#x27;t mean that it will use its existing key with those bad parameters. It shouldn&#x27;t be hard to make a PoC if this is in fact what is going on.