0
$\begingroup$

I know Signal provides future (backward) secrecy, and that it is based on Off-The-Record protocol. However, does OTR by itself also provide future secrecy?

Improve this question
$\endgroup$

1 Answer 1

Reset to default
1
$\begingroup$

I think so. OTR generates a new DH key pair for each round of message, similar to the DH ratchet in Signal. Also, OTR stands out by having a property called deniable authentication. This basically means the messages are only authenticated during a session between the communicating parties but not after the session. In fact, the MAC key will be revealed after the session is closed.

Improve this answer
$\endgroup$
2
  • $\begingroup$ Does Signal not provide deniability? $\endgroup$
    – fraiser
    Dec 11, 2018 at 23:57
  • $\begingroup$ @Kek Signal provides cryptographic deniability. But WhatsApp group messaging doesn't. $\endgroup$
    – defalt
    Mar 2, 2019 at 5:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.