encrypted group messages are an unsolved problem as soon as the group becomes too large afaik
That's what MLS is for, it reduces the amount of messages needed from O(n) to O(log(n)). Which is nice, but still doesn't scale as well as O(1) which is what you get with shared keys (at the expense of much worse security).
Oddbean new post about login | logout