3 ms·
The new one is randomly chosen (with the randomness coming from both parties, and then combined using ECDH and/or KEM). So you cannot predict it from previous k
by Sesse__ 1y ago
The new one is randomly chosen (with the randomness coming from both parties, and then combined using ECDH and/or KEM). So you cannot predict it from previous key material, pretty much by definition.
- immibis 1y agoThey also don't know the random elements used in previous headers, since they're thrown away a few rounds after the message was decrypted.