This protocol is way too complex to be secure. The converter should just raise an error if the secret is missing.