As far as I know these are the well known protocols that offer PFS

Are there any other well known protocols? Have any of these been shown to be insecure?


closed as too broad by CodesInChaos, D.W., Gilles, DrLecter, cygnusv Mar 3 '15 at 9:24

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

  • 1
    $\begingroup$ One terminology nit: IPsec (RFC4301) itself doesn't provide perfect forward secrecy, as IPsec just handles the packet encryption (and other packet handling); perfect forward secrecy is a property of the keying protocol. Hence, it is IKE (both IKEv1 and IKEv2) that offers PFS; however IPsec keyed with a different protocol might not. $\endgroup$ – poncho Feb 27 '15 at 16:54
  • $\begingroup$ @poncho Thanks for the clarification. I will edit it. $\endgroup$ – placeybordeaux Mar 1 '15 at 5:36