Questions tagged [future-secrecy]

A protocol is said to have future-secrecy (or post-compromise security) if compromising the master keys does not allow compromising future sessions. This is a counterpart to forward-secrecy, which is about protecting past sessions.

Filter by
Sorted by
Tagged with
3
votes
1answer
153 views

How does future secrecy fail for Signal group messaging?

In the paper More is Less: On the End-to-End Security of Group Chats in Signal, WhatsApp, and Threema, the abstract claims that We additionally show that strong security properties, such as ...
0
votes
1answer
58 views

Does Off-The-Record protocol provide future (backward) secrecy?

I know Signal provides future (backward) secrecy, and that it is based on Off-The-Record protocol. However, does OTR by itself also provide future secrecy?