New answers tagged


For forward secrecy without a synchronous handshake, you want something like the "ratcheting" protocol that Signal uses. It's a quite clever system, really: Each party generates an asymmetric key pair, and gives the public key to anybody who wants it. Each party generates and stores some number of [EC]DH parameters - one set for everybody you expect to need ...

Top 50 recent answers are included