Hacker News new | ask | show | jobs
by lke 4735 days ago
Maybe i'm reading it wrong but I have the impression that the problem here is the notion of forward secrecy.

Forward Secrecy only garanties that given the master keys Eve still can't derive the session key. It says nothing about the scheme used to create the session key (which may not be safe) It only states that even if Eve gets the private key that won't give her any information on the session key. It's the "won't leek any information" part that makes it "Perfect".

"Prefect" is used in the same way in "Perfect Information-Theorical Security" (http://en.wikipedia.org/wiki/Information-theoretic_security) were the Info-Theoric Security is perfect if the cipher text doesn't leek any information about the plain text.

The use of the word perfect seems consistent to me. The problem is actually understanding what we are talking about and what part of it is Perfect.

1 comments

So, the actual scheme is authenticated Diffie-Hellman key agreement. Its security is based on the discrete logarithm problem---it does not provide perfect information-theoretical security.

"Forward secrecy" is an accurate term. "Perfect" is redundant and potentially misleading.