Their implementation added one more round of encryption for unknown reasons, which turns out weakened AES enough to break it with a GPU cluster. Google looks to be well scrubbed of the story but it featured on HN a while back.