I know Signal provides future (backward) secrecy, and that it is based on Off-The-Record protocol. However, does OTR by itself also provide future secrecy?
1 Answer
$\begingroup$
$\endgroup$
2
I think so. OTR generates a new DH key pair for each round of message, similar to the DH ratchet in Signal. Also, OTR stands out by having a property called deniable authentication. This basically means the messages are only authenticated during a session between the communicating parties but not after the session. In fact, the MAC key will be revealed after the session is closed.
-
-
$\begingroup$ @Kek Signal provides cryptographic deniability. But WhatsApp group messaging doesn't. $\endgroup$– defaltMar 2, 2019 at 5:43