Security flaw in key recovery -- you're looking at it