Faulty XEP-0373 message processing
The OpenPGP plugin implementing XEP-0373 only matches the first "to" element against user's JID, while there can be multiple recipients; this leads to a failure when there shouldn't be one. The parse_signcrypt function from nbxmpp's openpgp module also assumes just a single "to" element, apparently.