0
$\begingroup$

I know Signal provides future (backward) secrecy, and that it is based on Off-The-Record protocol. However, does OTR by itself also provide future secrecy?

$\endgroup$
1
$\begingroup$

I think so. OTR generates a new DH key pair for each round of message, similar to the DH ratchet in Signal. Also, OTR stands out by having a property called deniable authentication. This basically means the messages are only authenticated during a session between the communicating parties but not after the session. In fact, the MAC key will be revealed after the session is closed.

$\endgroup$
  • $\begingroup$ Does Signal not provide deniability? $\endgroup$ – Kek Dec 11 '18 at 23:57
  • $\begingroup$ @Kek I don't think so. $\endgroup$ – Shan Chen Dec 11 '18 at 23:58

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.