New answers tagged diffie-hellman
1
For forward secrecy without a synchronous handshake, you want something like the "ratcheting" protocol that Signal uses. It's a quite clever system, really:
Each party generates an asymmetric key pair, and gives the public key to anybody who wants it.
Each party generates and stores some number of [EC]DH parameters - one set for everybody you expect to need ...
Top 50 recent answers are included
