Hacker News new | ask | show | jobs
by Sesse__ 259 days ago
The new one is randomly chosen (with the randomness coming from both parties, and then combined using ECDH and/or KEM). So you cannot predict it from previous key material, pretty much by definition.
1 comments

They also don't know the random elements used in previous headers, since they're thrown away a few rounds after the message was decrypted.