Skip to content

Post-compromise security

Short definition

A session can regain confidentiality after temporary state theft and safe key evolution.

Concrete example

An attacker copies session state then loses access; fresh exchanges may renew protection.

What it protects

Some future exchanges after temporary compromise, depending on protocol.

What it does not protect

Does not repair a phone still controlled by spyware.

Why it matters

Distinguish cryptographic recovery from cleaning a device.

Technical details

The property depends on key exchanges, assumptions and implementation; it is not uniform across all clients.

[1] [2]

Common misconceptions · Compare messengers