# Tag Info

But I read a question here that PFS can be achieved by deriving session keys with a hash of an old session key. But if I were to know the master key (the pre-shared key?), I could easily calculate all session keys or am I misunderstanding something? So the idea of PFS is that if the entire (secret) state of an entity at a time point $x$ is leaked and there ...