Y
Hacker News
new
|
ask
|
show
|
jobs
by
Sesse__
259 days ago
The new one is randomly chosen (with the randomness coming from both parties, and then combined using ECDH and/or KEM). So you cannot predict it from previous key material, pretty much by definition.
1 comments
immibis
259 days ago
They also don't know the random elements used in previous headers, since they're thrown away a few rounds after the message was decrypted.
link