Tag Info

New answers tagged


Properly speaking, forward secrecy is a property of a protocol. The protocol is forward secret if compromise of the long term keys does not allow an attacker to decipher any past communications. (Occasionally a distinction is made between that and perfect forward secrecy, with the latter secure when the attacker also knows e.g. all other session keys.) You ...


No, as a plain public key algorithm it cannot provide PFS on its own. It is comparable to RSA in that both can be used to achieve PFS with the help of e.g. Diffie-Hellman Key Exchange. Running the key exchange for every session/connection leads to an ephemeral session key which can be used as a key for a symmetric algorithm like AES. NTRUEncrypt only ...

Top 50 recent answers are included