I can see how my comment was misleading. My point was that those with a ground knowledge of encryption/security would most likely easily deduce this - but that doesn't mean you need such knowledge to understand what's going on.