3 ms·
"Forward secrecy" is listed as a feature. I've heard of "perfect forward secrecy" -- is there a distinction between the two?
by natch 9y ago
"Forward secrecy" is listed as a feature. I've heard of "perfect forward secrecy" -- is there a distinction between the two?
- Perceptes 9y agoNo, they are the same thing.
- rakoo 9y agoActually it loks like (n+1)sec isn't perfect: a symmetric key is shared by all participants for a certain amount of time, until a participant joins or leaves or asks for re-keying. So you have a chunk of messages, with no upper bound on how many messages share the same symmetric key.
- nullc 9y agoIt's a bad idea to use the perfect term, because "oh it has perfect secrecy! that will keep my data safe no matter what!"
- natch 9y agoYeah good point; that could be misleading to average people. Reminds me of when I once did a short gig at a place where the differently-clued owner had purchased some "BackUPS(TM)" brand backup power battery devices. Of course these have absolutely nothing whatsoever to do with data backup, but he was very satisfied with himself that he had checked off the requisite checkbox for data backups.