[krior]

afaik the key material is regenerated for every message. new keys can be derived for every subsequent message you send, but only until you get a reply, then a new key exchange takes place. And the key material for message m1 cannot derive keys for the messages that came before m1. If the old key material gets properly deleted then there is only a very small window of compromise. backing up those keys would defeat the purpose of the ratchet.

[evbogue]

yes, agreed, and isn't this feature re-encrypting all of the material without a ratchet or asymmetrical boxing?

[elvisloops]

Yes, it undoes all of the security features of Signal's encryption protocol.