I know Signal provides future (backward) secrecy, and that it is based on Off-The-Record protocol. However, does OTR by itself also provide future secrecy?


I think so. OTR generates a new DH key pair for each round of message, similar to the DH ratchet in Signal. Also, OTR stands out by having a property called deniable authentication. This basically means the messages are only authenticated during a session between the communicating parties but not after the session. In fact, the MAC key will be revealed after the session is closed.

|improve this answer|||||
  • $\begingroup$ Does Signal not provide deniability? $\endgroup$ – picotard Dec 11 '18 at 23:57
  • $\begingroup$ @Kek Signal provides cryptographic deniability. But WhatsApp group messaging doesn't. $\endgroup$ – defalt Mar 2 '19 at 5:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.