Re:"This telegram must be closely paraphrased before being c...
by zenmac on Sunday August 31, 2025 @10:17AM
(#45083318)
Isn't that why we have PFS now?
[ Parent
| on HN ]
Re:"This telegram must be closely paraphrased before being c...
by gruez on Sunday August 31, 2025 @10:37AM
(#45083460)
No, PFS is to ensure communications aren't compromised even if the server's private keys are compromised afterwards. It has nothing to do with mitigating known plaintext attacks. That's already mitigated with techniques like randomized IVs.
Re:"This telegram must be closely paraphrased before being c...
by numpad0 on Sunday August 31, 2025 @11:15AM
(#45083819)
So-called perfect forward secrecy uses temporary keys so that eavesdropped logs can't be decrypted after those keys are discarded. To prevent known-plaintext attacks and/or statistical analysis, data entropy must be equalized so that patterns won't be apparent even before encryption.