Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

when i reading about this paper, in the Setup of SIM section 5.2, it says that "According to the definition of PFS game", i wonder what the definition of PFS game is?

share|improve this question

1 Answer 1

PFS, or perfect forward secrecy, is a desirable (in many cases) property for cryptographic protocols. It says that even if your long-term secret (or static key in the paper) is revealed at some point, messages sent in the past should still be kept secret.

Right after that line you quote, they define their PFS game. I'll reword it here to make it more generic.

The game is between three parties. Alice, Bob, and Trudy. Alice and Bob are able to exchange messages using the protocol for some period of time (the test session in the paper). During this period, Trudy can only watch the communications (i.e., encrypted messages). After that period of time, Trudy can, whenever she chooses, force Alice or Bob or both to reveal their long-term secrets (could be their corresponding private keys, or it could be a long-term shared symmetric key). At this point, Trudy's goal is to reveal the plaintext of one of the prior messages. If she can do this, the protocol does not have the PFS property.

share|improve this answer
i think it's more like a definition of PFS but the game –  Alex Sep 17 '13 at 13:41
The game follows almost directly from the definition as it is a pretty simple concept. –  mikeazo Sep 17 '13 at 14:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.