As far as I know these are the well known protocols that offer PFS

Are there any other well known protocols? Have any of these been shown to be insecure?

  • 1
    $\begingroup$ One terminology nit: IPsec (RFC4301) itself doesn't provide perfect forward secrecy, as IPsec just handles the packet encryption (and other packet handling); perfect forward secrecy is a property of the keying protocol. Hence, it is IKE (both IKEv1 and IKEv2) that offers PFS; however IPsec keyed with a different protocol might not. $\endgroup$
    – poncho
    Feb 27, 2015 at 16:54
  • $\begingroup$ @poncho Thanks for the clarification. I will edit it. $\endgroup$ Mar 1, 2015 at 5:36