Implement MSC3061: Sharing room keys for past messages

[BillCarsonFr]

From element-ios created by manuroe: element-hq/element-ios#4947

As per MSC3061

See element-hq/element-android#4153

[jplatte]

I've created a Ruma issue for this as well: ruma/ruma#1104

[richvdh]

When we do this, we should be sure not to repeat element-hq/element-web#23778 (sending out all of the room keys at once).

[poljar]

I'm aware of the flaws of the current approach, that is one of the reasons why this isn't yet implemented in the rust-sdk. A proper solution would need more time.

Thanks for reminding me.

[richvdh]

@poljar if there are other flaws it might be good to link them here, so we can make sure that they are correctly addressed in whatever solution we use for the rust-sdk?

[poljar]

The main problems are:

1. The authenticity of such keys can't be proven
2. There's no way send over a batch of room keys, so m.forwarded_room_key is used
3. Because of no 1 it's important to treat such keys in a special way, but no 2. makes it hard to do so.

What I proposed was to have a separate event type, which will separate the concepts and allow a batch of room keys to be sent over.

[dkasak]

Given the reversion of MSC3061 following the vulnerability disclosure, closing this as not planned.