New answers tagged

0

I'm editing a previous response I wrote here. Apologies if you read the other. I missed that you gave the context of a instant messaging protocol. Your process description is very different from how TLS implements forward secrecy. At this point I'd just say that in your scenario, it is not necessary that each message use a new symmetric key. It's ok to ...


0

But I read a question here that PFS can be achieved by deriving session keys with a hash of an old session key. But if I were to know the master key (the pre-shared key?), I could easily calculate all session keys or am I misunderstanding something? So the idea of PFS is that if the entire (secret) state of an entity at a time point $x$ is leaked and there ...


Top 50 recent answers are included