@semitones@tiny.tilde.website @0xabad1dea@infosec.exchange the spec.
The key is derived from the password. There is no explicit "wrong password" notification, just "using this password, all I receive is garbage, and no one answers me."
Because of that, if there is another reason why you receive garbage and no one answers you, it goes Occam's Razor on you.